Re: can we help with libvorbis release for CVE fixes?

Ralph Giles <[email protected]> Tue, 30 Jun 2020 08:58:08 -0700
Newsgroups gmane.comp.multimedia.ogg.vorbis.devel
Message-ID <[email protected]>
WWVzLCB0aGUgZ2l0bGFiIGluc3RhbmNlIGlzIHRoZSBjb3JyZWN0IHVwc3RyZWFtIGRldmVsb3Bt
ZW50CnJlcG9zaXRvcnkuIFdlIG1haW50YWluIGEgbWlycm9yIGF0IGdpdGh1YiBmb3IgdGhlIGNv
bnZlbmllbmNlIG9mCmRldmVsb3BlcnMgdGhlcmUuCgpDaGVlcnMsClJhbHBoCgpPbiBNb24sIDIw
MjAtMDYtMjkgYXQgMjE6MjcgKzAwMDAsIEVsbGVuIEpvaG5zb24gd3JvdGU6Cj4gSGkgUmFscGgg
YW5kIGxpYnZvcmJpcyBkZXZlbG9wZXJzLAo+ICAgSSB0aG91Z2h0IHRoZSB2b3JiaXMgZ2l0bGFi
IHByb2plY3Qgd2FzIHRoZSBtYWluIGRldmVsb3BtZW50IHNpdGUgKAo+IGh0dHBzOi8vZ2l0bGFi
LnhpcGgub3JnL3hpcGgvdm9yYmlzKSBiZWNhdXNlIHRoYXQncyB3aGF0IHRoZSBOVkQgQ1ZFCj4g
dHJhY2tlciBwb2ludHMgdG8gZm9yIHRoZSB0d28gQ1ZFcyBJIG1lbnRpb25lZC4gIEJ1dCBJIGp1
c3QgcmVhbGl6ZWQKPiB0aGVyZSdzIGFsc28gYSB2b3JiaXMgZ2l0aHViIHByb2plY3QgKGh0dHBz
Oi8vZ2l0aHViLmNvbS94aXBoL3ZvcmJpcykKPiAuICBCb3RoIGFwcGVhciB0byBoYXZlIHJlY2Vu
dCBhY3Rpdml0eS4KPiAgIElzIHRoZSBnaXRsYWIgcHJvamVjdCB0aGUgY29ycmVjdCBvbmUgdG8g
Z2V0IHRoZSBDVkUgZml4ZXMgZnJvbSBzbwo+IHdlIGNhbiBwYXRjaCBvdXIgMS4zLjYgdG8gaGF2
ZSBsYXRlc3Qgc2VjdXJpdHkgZml4ZXM/Cj4gICBUaGFua3MhCj4gICAgICBlbGxlbgo+IAo+IC0t
LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tCj4gRnJvbTogRWxsZW4gSm9obnNvbiAKPiBTZW50OiBG
cmlkYXksIEp1bmUgMTIsIDIwMjAgMTI6MTkgUE0KPiBUbzogUmFscGggR2lsZXMgPGdpbGVzQHRo
YXVtYXMubmV0Pjsgdm9yYmlzLWRldkB4aXBoLm9yZwo+IFN1YmplY3Q6IFJFOiBbVm9yYmlzLWRl
dl0gY2FuIHdlIGhlbHAgd2l0aCBsaWJ2b3JiaXMgcmVsZWFzZSBmb3IgQ1ZFCj4gZml4ZXM/Cj4g
Cj4gSGkgUmFscGgsCj4gICBUaGFuayB5b3UgZm9yIHlvdXIgcmVwbHkhICAKPiAgIEZvciBjb250
ZXh0IC0tIHdlIGNvbnNpZGVyIHJlcG9ydGVkIENWRXMgYXMgYnVncyBldmVuIGlmIGl0J3MgaW4g
YQo+IHRoaXJkLXBhcnR5IGxpYnJhcnkgd2UgdXNlIChzdWNoIGFzIGxpYnZvcmJpcykuICBXZSBm
aXJzdCBkZXRlcm1pbmUKPiBpZiB0aGUgQ1ZFIGlzIHNvbWV0aGluZyB0aGF0IHdvdWxkIGltcGFj
dCBvdXIgY3VzdG9tZXIgd29ya2Zsb3dzLiAgSW4KPiB0aGlzIGNhc2UgYmVjYXVzZSBvZiBvdXIg
dXNlIG9mIGxpYnZvcmJpcyBmb3IgYXVkaW8gSS9PLCBpdCBkb2VzCj4gaW1wYWN0IG91ciBjdXN0
b21lcnMgc28gd2UgbmVlZCB0byByZXNvbHZlIHRoZSBDVkUgYXMgc29vbiBhcwo+IHBvc3NpYmxl
Lgo+ICAgSW4gdGhlIHNob3J0IHRlcm0gdW50aWwgYSBuZXcgdmVyc2lvbiBpcyByZWxlYXNlZCwg
SSdkIGxpa2UgdG8KPiBwYXRjaCBvdXIgbGlidm9yYmlzIDEuMy42IHdpdGggdGhlIHR3byBDVkUg
Zml4ZXMgdGhhdCBJIHRoaW5rIGFyZSBvbgo+IHRoZSBtYXN0ZXIgYnJhbmNoLiAgRnJvbSB0aGUg
Z2l0bGFiIGNvbW1lbnRzLCBJJ20gcHJldHR5IHN1cmUgQ1ZFLQo+IDIwMTgtMTAzOTIgaXMgZml4
ZWQgdmlhIGlzc3VlIDIzMzUsIGJ1dCBJJ20gc3RpbGwgZnV6enkgb24gd2hldGhlcgo+IENWRS0y
MDE4LTEwMzkzIGlzIGZpeGVkIHZpYSBpc3N1ZSAyMzM0IGJlY2F1c2Ugb2YgaXRzIGxpbmsgdG8K
PiBkdXBsaWNhdGUgaXNzdWUgMjMzMCB3aGljaCBkb2Vzbid0IGV4aXN0LiAgU2VlIAo+IGh0dHBz
Oi8vZ2l0bGFiLnhpcGgub3JnL3hpcGgvdm9yYmlzLy0vaXNzdWVzLzIzMzQgYW5kIHRoZSBjb21t
ZW50IGJ5Cj4gTW9udHkgc2F5aW5nIGl0J3MgYSBkdXAgb2YgMjMzMCwgYnV0IFBpZXJyZSBjb21t
ZW50cyB0aGF0IDIzMzAKPiBkb2Vzbid0IGV4aXN0IHNvIGhlIGFza2VkIGlmIE1vbnR5IGNhbiBw
b2ludCB0byB0aGUgZml4Lgo+ICAgSW4gdGhlIGxvbmdlciB0ZXJtLCB3ZSdkIGxvdmUgdG8gdGFs
ayBtb3JlIGFib3V0IGhvdyB3ZSBjYW4gaGVscAo+IG1vdmUgdGhlIG5leHQgcmVsZWFzZSBhbG9u
ZyBhbmQgY29udHJpYnV0ZSB0byB0aGUgbGlidm9yYmlzIHByb2plY3QKPiBpbiBnZW5lcmFsLgo+
ICAgWWVzLCBpZiB5b3UgY2FuIHBsZWFzZSB2ZXJpZnkgdGhhdCBib3RoIHRoZXNlIENWRXMgYXJl
IGZpeGVkIGluCj4gbWFzdGVyIGJyYW5jaCwgSSdkIHJlYWxseSBhcHByZWNpYXRlIGl0Lgo+ICAg
VGhhbmsgeW91IQo+ICAgICAgIGVsbGVuCj4gICAgICAgICBNQVRMQUIgQXVkaW8sIFZpZGVvLCBJ
bWFnZSwgYW5kIFNjaWVudGlmaWMgRGF0YSBGb3JtYXRzCj4gICAgICAgICBNYXRoV29ya3MKPiAK
PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQo+IEZyb206IFJhbHBoIEdpbGVzIDxnaWxlc0B0
aGF1bWFzLm5ldD4KPiBTZW50OiBXZWRuZXNkYXksIEp1bmUgMTAsIDIwMjAgNjo1OCBQTQo+IFRv
OiBFbGxlbiBKb2huc29uIDxlbGxlbmpAbWF0aHdvcmtzLmNvbT47IHZvcmJpcy1kZXZAeGlwaC5v
cmcKPiBTdWJqZWN0OiBSZTogW1ZvcmJpcy1kZXZdIGNhbiB3ZSBoZWxwIHdpdGggbGlidm9yYmlz
IHJlbGVhc2UgZm9yIENWRQo+IGZpeGVzPwo+IAo+IEhpIEVsbGVuLAo+IAo+IFRoYW5rcyBmb3Ig
eW91ciBraW5kIG9mZmVyIHRvIGhlbHAgdGhlIHJlbGVhc2UgYWxvbmcuIFdlIGhhdmUgaW5kZWVk
Cj4gYmVlbiBoYXZpbmcgdHJvdWJsZSBmaW5kaW5nIHJlc291cmNlcyBmb3IgdGhhdC4KPiAKPiBZ
b3UgY2FuIGNlcnRhaW5seSBoZWxwIGJ5IHRlc3RpbmcgdGhlIGdpdCBtYXN0ZXIgYnJhbmNoIHdp
dGggeW91cgo+IHNvZnR3YXJlIGFuZCByZXBvcnRpbmcgYW55IGlzc3VlcyB5b3UgZmluZC4gT3Ro
ZXJ3aXNlLCB0cmlhZ2luZwo+IG91dHN0YW5kaW5nIGJ1ZyByZXBvcnRzIGFuZCBwYXRjaGVzIGlz
IGFsd2F5cyBoZWxwZnVsLCBhbHRob3VnaAo+IHRoYXQncyBub3QgZXNzZW50aWFsIGZvciBhIHNl
Y3VyaXR5LWJhc2VkIHJlbGVhc2UuCj4gCj4gSSdsbCB0cnkgdG8gZmluZCBvdXQgd2hhdCB0aGUg
cmVzb2x1dGlvbiBvbiB0aGUgcmVwb3J0ZWQgQ1ZFcyB3YXMuCj4gCj4gQ2hlZXJzLAo+ICAtcgo+
IAo+IE9uIFdlZCwgMjAyMC0wNi0xMCBhdCAxODo1MSArMDAwMCwgRWxsZW4gSm9obnNvbiB3cm90
ZToKPiA+IEhpIGxpYnZvcmJpcyBkZXZlbG9wZXJzIQo+ID4gICAgSeKAmW0gd29uZGVyaW5nIGlm
IHlvdSBoYWQgYSBjaGFuY2UgdG8gc2VlIG15IHJlcXVlc3QgZm9yCj4gPiByZWxlYXNpbmcgYSAK
PiA+IG5ldyBsaWJ2b3J2aXMgdmVyc2lvbiDigJMgdGhpcyBpcyB0byBoYXZlIGFuIG9mZmljaWFs
IGxpYnZvcmJpcwo+ID4gcmVsZWFzZSAKPiA+IGNvbnRhaW5pbmcgdGhlIENWRSBmaXhlcyB0aGF0
IGFwcGVhciB0byBiZSBmaXhlZCBpbiB0aGUgbWFzdGVyCj4gPiBicmFuY2guCj4gPiAgICBJcyB0
aGVyZSBhbnl0aGluZyB3ZSBjYW4gZG8gdG8gaGVscCB3aXRoIGdldHRpbmcgYSByZWxlYXNlIG91
dD8KPiA+IFdl4oCZcmUgaGFwcHkgdG8gd29yayB3aXRoIHlvdSBvbiB0aGlzLiAgUGxlYXNlIGxl
dCB1cyBrbm93IGlmIHdlIGNhbgo+ID4gZG8gCj4gPiBhbnl0aGluZyB0byBoZWxwIG1vdmUgdGhp
cyBhbG9uZy4KPiA+ICAgIFRoYW5rIHlvdSEKPiA+ICAgICAgRWxsZW4gSm9obnNvbgo+ID4gICAg
ICBNQVRMQUIgQXVkaW8sIFZpZGVvLCBJbWFnZSwgYW5kIFNjaWVudGlmaWMgRGF0YSBGb3JtYXRz
Cj4gPiAgICAgIE1hdGhXb3Jrcwo+ID4gIAo+ID4gIAo+ID4gRnJvbTogRWxsZW4gSm9obnNvbgo+
ID4gU2VudDogVHVlc2RheSwgTWF5IDI2LCAyMDIwIDU6NDggUE0KPiA+IFRvOiB2b3JiaXMtZGV2
QHhpcGgub3JnCj4gPiBTdWJqZWN0OiBsaWJ2b3JiaXMgcmVsZWFzZSBmb3IgcmVjZW50IENWRSBm
aXhlcz8KPiA+ICAKPiA+IEhpIGxpYnZvcmJpcyBkZXZlbG9wZXJzLCAKPiA+ICAgIEkgaG9wZSB5
b3UgYWxsIGFyZSB3ZWxsIQo+ID4gICAgSGVyZSBhdCBNYXRoV29ya3Mgd2UgdXNlIGxpYnZvcmJp
cyBhcyBwYXJ0IG9mIG91ciBNQVRMQUIgYXVkaW8KPiA+IEkvTyAKPiA+IGZ1bmN0aW9uYWxpdHks
IGFuZCBvdXIgY3VycmVudCB2ZXJzaW9uIGlzIHlvdXIgbGF0ZXN0IHZlcnNpb24KPiA+IDEuMy42
Lgo+ID4gV2XigJl2ZSBoYWQgdGhlIGZvbGxvd2luZyBsaWJ2b3JiaXMgQ1ZFcyByZXBvcnRlZCB0
byB1cyB3aGljaCBhcHBlYXIKPiA+IHRvIAo+ID4gYmUgZml4ZWQgaW4geW91ciBnaXRsYWIgbWFz
dGVyIGJyYW5jaCBhbmQgd2hpY2ggaW1wYWN0IG91ciBjdXN0b21lcgo+ID4gd29ya2Zsb3dzOgo+
ID4gICAgICBDVkUtMjAxOC0xMDM5MiAobG9va3MgbGlrZSBpdOKAmXMgZml4ZWQgdmlhIGdpdGxh
YiBpc3N1ZSAyMzM1KQo+ID4gICAgICBDVkUtMjAxOC0xMDM5MyAobG9va3MgbGlrZSBpdOKAmXMg
Zml4ZWQgdmlhIGdpdGxhYiBpc3N1ZSAyMzM0LAo+ID4gYnV0IAo+ID4gdGhlIGxpbmsgdG8gaXRz
IGR1cGxpY2F0ZSBpc3N1ZSAyMzMwIGRvZXMgbm90IHdvcmsgc28gSeKAmW0gbm90IDEwMCUgCj4g
PiBzdXJlIGlmIHRoaXMgaXMgZml4ZWQpCj4gPiAgIENhbiB5b3UgcGxlYXNlIGRvIGEgcG9pbnQg
cmVsZWFzZSBzbyB0aGF0IHdlIGNhbiBiZSBzZWN1cml0eSAKPiA+IGNvbXBsaWFudCBmb3Igb3Vy
IE1BVExBQiBjdXN0b21lcnM/Cj4gPiAgIFRoYW5rIHlvdSEKPiA+ICAgICAgRWxsZW4gSm9obnNv
bgo+ID4gICAgICBNQVRMQUIgQXVkaW8sIFZpZGVvLCBJbWFnZSwgYW5kIFNjaWVudGlmaWMgRGF0
YSBGb3JtYXRzCj4gPiAgICAgIE1hdGhXb3Jrcwo+ID4gIAo+ID4gX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX18KPiA+IFZvcmJpcy1kZXYgbWFpbGluZyBsaXN0
Cj4gPiBWb3JiaXMtZGV2QHhpcGgub3JnCj4gPiBodHRwOi8vbGlzdHMueGlwaC5vcmcvbWFpbG1h
bi9saXN0aW5mby92b3JiaXMtZGV2Lgo+ID4geGlwaC5vcmcKCl9fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fClZvcmJpcy1kZXYgbWFpbGluZyBsaXN0ClZvcmJp
cy1kZXZAeGlwaC5vcmcKaHR0cDovL2xpc3RzLnhpcGgub3JnL21haWxtYW4vbGlzdGluZm8vdm9y
YmlzLWRldgo=