[SECURITY] vorbis-tools

Yaakov Selkowitz yselkowitz@cygwin.com
Wed Feb 18 04:42:00 GMT 2015


David,

vorbis-tools requires a patch for CVE-2014-9640:

http://pkgs.fedoraproject.org/cgit/vorbis-tools.git/plain/vorbis-tools-1.4.0-bz1185558.patch

There are other patches in that repo that you may wish to consider
adding; at a minimum, I would recommend the patch for vcut:

http://pkgs.fedoraproject.org/cgit/vorbis-tools.git/plain/vorbis-tools-1.4.0-bz1003607.patch

TIA,

Yaakov




More information about the Cygwin-apps mailing list