Re: new 1.3.7 and fix for CVE-2018-10392 (issue 2335)?
Ralph Giles <[email protected]> Mon, 20 Jul 2020 09:18:56 -0700
| Newsgroups | gmane.comp.multimedia.ogg.vorbis.devel |
|---|---|
| Message-ID | <[email protected]> |
WWVzLCBDVkUtMjAxOC0xMDM5MiBpcyBmaXhlZCBpbiB0aGUgMS4zLjcgcmVsZWFzZS4gSSd2ZSB1 cGRhdGVkIHRoZQpyZWxlYXNlIG5vdGVzIG9uIHRoZSBnaXRsYWIgYW5kIGdpdGh1YiBwcm9qZWN0 cywgYW5kIHRoZSBDSEFOR0VTIGZpbGUKaW4gdGhlIHJlcG9zaXRvcnkgaXRzZWxmLiBJIGRpZCBu b3QgdXBkYXRlIHRoZSAxLjMuNyBzb3VyY2UgcGFja2FnZXMgb3IKdGFnLCBzaW5jZSB0aG9zZSBh cmUgcHVibGlzaGVkIGFydGVmYWN0cy4KClRoYW5rcyBmb3IgcG9pbnRpbmcgb3V0IHRoaXMgb3Zl cnNpZ2h0LApSYWxwaAoKT24gVHVlLCAyMDIwLTA3LTA3IGF0IDE5OjAwICswMDAwLCBFbGxlbiBK b2huc29uIHdyb3RlOgo+IEhpIFJhbHBoLAo+ICAgQWdhaW4sIHRoYW5rcyBzbyBtdWNoIGZvciBk b2luZyBhbGwgdGhpcyEgIFBsdXMgdGhhbmtzIHRvIGFsbCB0aGUKPiBmb2xrcyB3aG8gY29udHJp YnV0ZWQgdG8gdGhlIG5ldyByZWxlYXNlIQo+ICAgUXVpY2sgY2xhcmlmeWluZyBxdWVzdGlvbiAt LSBJc24ndCBDVkUtMjAxOC0xMDM5MiAobG9va3MgbGlrZSBpdOKAmXMKPiBmaXhlZCBpbiBodHRw czovL2dpdGxhYi54aXBoLm9yZy94aXBoL3ZvcmJpcy8tL2lzc3Vlcy8yMzM1KSBhbHNvCj4gaW5j bHVkZWQgaW4gbmV3IHZlcnNpb24gMS4zLjc/IElmIHNvIGNhbiB5b3UgcGxlYXNlIGFkZCBpdCB0 byByZWxlYXNlCj4gbm90ZXM/Cj4gICAoSSBhc2tlZCB0aGUgc2FtZSBxdWVzdGlvbiAgaW4gCj4g aHR0cHM6Ly9naXRsYWIueGlwaC5vcmcveGlwaC92b3JiaXMvLS9pc3N1ZXMvMjMzNCkuCj4gICBU aGFua3MgYWdhaW4hCj4gICAgICBlbGxlbgo+ICAKPiBGcm9tOiBFbGxlbiBKb2huc29uIAo+IFNl bnQ6IE1vbmRheSwgSnVseSA2LCAyMDIwIDQ6MzkgUE0KPiBUbzogUmFscGggR2lsZXMgPGdpbGVz QHRoYXVtYXMubmV0Pjsgdm9yYmlzLWRldkB4aXBoLm9yZwo+IFN1YmplY3Q6IFJFOiBbVm9yYmlz LWRldl0gY2FuIHdlIGhlbHAgd2l0aCBsaWJ2b3JiaXMgcmVsZWFzZSBmb3IgQ1ZFCj4gZml4ZXM/ Cj4gIAo+IEhpIFJhbHBoLAo+ICAgVGhhbmsgeW91IHNvIG11Y2ggZm9yIG5vdCBvbmx5IHRyYWNr aW5nIGRvd24gdGhlIGZpeCBmb3IgQ1ZFLTIwMTgtCj4gMTAzOTMgYW5kIGFkZGluZyB0aGUgZXh0 cmEgYm91bmRzIGNoZWNrIHRvIGJhcmtfbm9pc2VfaHlicmlkbXAoKSwgYnV0Cj4gYWxzbyBmb3Ig cmVsZWFzaW5nIGFuIG9mZmljaWFsIDEuMy43IHJlbGVhc2Ugd2l0aCB0aGVzZSBmaXhlcyBhbmQK PiBvdGhlciBidWcgZml4ZXMhCj4gICBXZSByZWFsbHkgYXBwcmVjaWF0ZSB5b3VyIHdvcmsgb24g Y2xhcmlmeWluZyB0aGUgQ1ZFIGZpeC4gIFBsdXMKPiB3aXRoIHRoZSBuZXcgcmVsZWFzZSBJIGNh biB1cGdyYWRlIGZyb20gMS4zLjYgdG8gMS4zLjcgaW5zdGVhZCBvZgo+IGhhdmluZyB0byBwYXRj aCBwaWVjZW1lYWwgZnJvbSB0aGUgbWFzdGVyIGJyYW5jaC4KPiAgIFBsZWFzZSBsZXQgdXMga25v dyBob3cgTWF0aFdvcmtzIGNhbiBoZWxwIHdpdGggdGhlIGxpYnZvcmJpcwo+IHByb2plY3QgbW92 aW5nIGZvcndhcmQuICBXZeKAmXJlIGhhcHB5IHRvIHdvcmsgd2l0aCB5b3UhCj4gICBUaGFua3Mh Cj4gICAgIGVsbGVuCj4gIAo+IEZyb206IFJhbHBoIEdpbGVzIDxnaWxlc0B0aGF1bWFzLm5ldD4g Cj4gU2VudDogU2F0dXJkYXksIEp1bHkgNCwgMjAyMCAzOjE5IFBNCj4gVG86IEVsbGVuIEpvaG5z b24gPGVsbGVuakBtYXRod29ya3MuY29tPjsgdm9yYmlzLWRldkB4aXBoLm9yZwo+IFN1YmplY3Q6 IFJlOiBbVm9yYmlzLWRldl0gY2FuIHdlIGhlbHAgd2l0aCBsaWJ2b3JiaXMgcmVsZWFzZSBmb3Ig Q1ZFCj4gZml4ZXM/Cj4gIAo+IE9rLAo+IAo+IEkgd2Fzbid0IGFibGUgdG8gdHJhY2sgZG93biB0 aGUgb3JpZ2luYWwgc3RlcHMgdG8gcmVwcm9kdWNlIHRoaXMKPiBpc3N1ZSxzIGJ1dCB3ZSBiZWxp ZXZlIENWRS0yMDE4LTEwMzkzIGlzIGEgZHVwaWljYXRlIG9mIENWRS0yMDE3LQo+IDE0MTYwLCAK PiBib3RoIGZpeGVkIGJ5IGNvbW1pdCAwMThjYTI2ZGVjZTYuCj4gCj4gQmVjYXVzZSBvZiB0aGUg Y29uZnVzaW9uLCBJIGFkZGVkIGFkZGl0aW9uYWwgYm91bmRzIGNoZWNrcyB0bwo+IHRoZSBiYXJr X25vaXNlX2h5YnJpZG1wIGZ1bmN0aW9uLCB3aGljaCBtYWtlIGl0IGNsZWFyIHRvIGxvY2FsCj4g YW5hbHlzaXMKPiB0aGF0IG5vIGZvciBidWdzIGluIHRoaXMgY2xhc3MgYXJlIHBvc3NpYmxlLiBU aGlzIGNoYW5nZSBpcyBpbgo+IGNvbW1pdCBhOWViOTlhNWJkNmYuCj4gCj4gQm90aCBvZiB0aGVz ZSBjaGFuZ2VzIGFyZSBpbmNsdWRlZCBpbiB0aGUgbGlidm9yYmlzIDEuMy43IHJlbGVhc2UsCj4g cG9zdGVkIHRvZGF5LiBUaGlzIHVwc3RyZWFtIHJlbGVhc2UgYWRkcmVzc2VzIGFsbCB0aGUgQ1ZF IGlzc3VlcyBJJ20KPiBhd2FyZSBvZi4gSG9wZWZ1bGx5IHRoYXQgYWRkcmVzc2VzIHlvdXIgbmVl ZHMuCj4gCj4gVGhhbmtzIGZvciB5b3VyIHBhdGllbmNlIHdoaWxlIHdlIHByZXBhcmVkIHRoaXMg cmVsZWFzZSwgYW5kIHRoYW5rcwo+IHRvCj4gZXZlcnlvbmUgd2hvIGNvbnRyaWJ1dGVkIHBhdGNo ZXMsIHRlc3RpbmcsIGFuZCByZXZpZXcgd29yay4KPiAKPiBDaGVlcnMsCj4gUmFscGgKPiBYaXBo Lk9yZyBGb3VuZGF0aW9uIGZvciBPcGVuIE11bHRpbWVkaWEKPiAKPiBPbiBGcmksIDIwMjAtMDYt MTIgYXQgMTY6MTkgKzAwMDAsIEVsbGVuIEpvaG5zb24gd3JvdGU6Cj4gPiBIaSBSYWxwaCxDVkUt MjAxOC0xMDM5Mwo+ID4gVGhhbmsgeW91IGZvciB5b3VyIHJlcGx5ISAKPiA+IEZvciBjb250ZXh0 IC0tIHdlIGNvbnNpZGVyIHJlcG9ydGVkIENWRXMgYXMgYnVncyBldmVuIGlmIGl0J3MgaW4gYQo+ ID4gdGhpcmQtcGFydHkgbGlicmFyeSB3ZSB1c2UgKHN1Y2ggYXMgbGlidm9yYmlzKS4gV2UgZmly c3QgZGV0ZXJtaW5lCj4gPiBpZiB0aGUgQ1ZFIGlzIHNvbWV0aGluZyB0aGF0IHdvdWxkIGltcGFj dCBvdXIgY3VzdG9tZXIgd29ya2Zsb3dzLgo+IEluCj4gPiB0aGlzIGNhc2UgYmVjYXVzZSBvZiBv dXIgdXNlIG9mIGxpYnZvcmJpcyBmb3IgYXVkaW8gSS9PLCBpdCBkb2VzCj4gPiBpbXBhY3Qgb3Vy IGN1c3RvbWVycyBzbyB3ZSBuZWVkIHRvIHJlc29sdmUgdGhlIENWRSBhcyBzb29uIGFzCj4gPiBw b3NzaWJsZS4KPiA+IEluIHRoZSBzaG9ydCB0ZXJtIHVudGlsIGEgbmV3IHZlcnNpb24gaXMgcmVs ZWFzZWQsIEknZCBsaWtlIHRvCj4gPiBwYXRjaCBvdXIgbGlidm9yYmlzIDEuMy42IHdpdGggdGhl IHR3byBDVkUgZml4ZXMgdGhhdCBJIHRoaW5rIGFyZQo+IG9uCj4gPiB0aGUgbWFzdGVyIGJyYW5j aC4gRnJvbSB0aGUgZ2l0bGFiIGNvbW1lbnRzLCBJJ20gcHJldHR5IHN1cmUgQ1ZFLQo+ID4gMjAx OC0xMDM5MiBpcyBmaXhlZCB2aWEgaXNzdWUgMjMzNSwgYnV0IEknbSBzdGlsbCBmdXp6eSBvbiB3 aGV0aGVyCj4gPiBDVkUtMjAxOC0xMDM5MyBpcyBmaXhlZCB2aWEgaXNzdWUgMjMzNCBiZWNhdXNl IG9mIGl0cyBsaW5rIHRvCj4gPiBkdXBsaWNhdGUgaXNzdWUgMjMzMCB3aGljaCBkb2Vzbid0IGV4 aXN0LiBTZWUgCj4gPiBodHRwczovL2dpdGxhYi54aXBoLm9yZy94aXBoL3ZvcmJpcy8tL2lzc3Vl cy8yMzM0IGFuZCB0aGUgY29tbWVudAo+IGJ5Cj4gPiBNb250eSBzYXlpbmcgaXQncyBhIGR1cCBv ZiAyMzMwLCBidXQgUGllcnJlIGNvbW1lbnRzIHRoYXQgMjMzMAo+ID4gZG9lc24ndCBleGlzdCBz byBoZSBhc2tlZCBpZiBNb250eSBjYW4gcG9pbnQgdG8gdGhlIGZpeC4KPiA+IEluIHRoZSBsb25n ZXIgdGVybSwgd2UnZCBsb3ZlIHRvIHRhbGsgbW9yZSBhYm91dCBob3cgd2UgY2FuIGhlbHAKPiA+ IG1vdmUgdGhlIG5leHQgcmVsZWFzZSBhbG9uZyBhbmQgY29udHJpYnV0ZSB0byB0aGUgbGlidm9y YmlzIHByb2plY3QKPiA+IGluIGdlbmVyYWwuCj4gPiBZZXMsIGlmIHlvdSBjYW4gcGxlYXNlIHZl cmlmeSB0aGF0IGJvdGggdGhlc2UgQ1ZFcyBhcmUgZml4ZWQgaW4KPiA+IG1hc3RlciBicmFuY2gs IEknZCByZWFsbHkgYXBwcmVjaWF0ZSBpdC4KPiA+IFRoYW5rIHlvdSEKPiA+IGVsbGVuCj4gPiBN QVRMQUIgQXVkaW8sIFZpZGVvLCBJbWFnZSwgYW5kIFNjaWVudGlmaWMgRGF0YSBGb3JtYXRzCj4g PiBNYXRoV29ya3MKPiA+IAo+ID4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0KPiA+IEZyb206 IFJhbHBoIEdpbGVzIDxnaWxlc0B0aGF1bWFzLm5ldD4gCj4gPiBTZW50OiBXZWRuZXNkYXksIEp1 bmUgMTAsIDIwMjAgNjo1OCBQTQo+ID4gVG86IEVsbGVuIEpvaG5zb24gPGVsbGVuakBtYXRod29y a3MuY29tPjsgdm9yYmlzLWRldkB4aXBoLm9yZwo+ID4gU3ViamVjdDogUmU6IFtWb3JiaXMtZGV2 XSBjYW4gd2UgaGVscCB3aXRoIGxpYnZvcmJpcyByZWxlYXNlIGZvcgo+IENWRQo+ID4gZml4ZXM/ Cj4gPiAKPiA+IEhpIEVsbGVuLAo+ID4gCj4gPiBUaGFua3MgZm9yIHlvdXIga2luZCBvZmZlciB0 byBoZWxwIHRoZSByZWxlYXNlIGFsb25nLiBXZSBoYXZlCj4gaW5kZWVkCj4gPiBiZWVuIGhhdmlu ZyB0cm91YmxlIGZpbmRpbmcgcmVzb3VyY2VzIGZvciB0aGF0Lgo+ID4gCj4gPiBZb3UgY2FuIGNl cnRhaW5seSBoZWxwIGJ5IHRlc3RpbmcgdGhlIGdpdCBtYXN0ZXIgYnJhbmNoIHdpdGggeW91cgo+ ID4gc29mdHdhcmUgYW5kIHJlcG9ydGluZyBhbnkgaXNzdWVzIHlvdSBmaW5kLiBPdGhlcndpc2Us IHRyaWFnaW5nCj4gPiBvdXRzdGFuZGluZyBidWcgcmVwb3J0cyBhbmQgcGF0Y2hlcyBpcyBhbHdh eXMgaGVscGZ1bCwgYWx0aG91Z2gKPiA+IHRoYXQncyBub3QgZXNzZW50aWFsIGZvciBhIHNlY3Vy aXR5LWJhc2VkIHJlbGVhc2UuCj4gPiAKPiA+IEknbGwgdHJ5IHRvIGZpbmQgb3V0IHdoYXQgdGhl IHJlc29sdXRpb24gb24gdGhlIHJlcG9ydGVkIENWRXMgd2FzLgo+ID4gCj4gPiBDaGVlcnMsCj4g PiAtcgo+ID4gCj4gPiBPbiBXZWQsIDIwMjAtMDYtMTAgYXQgMTg6NTEgKzAwMDAsIEVsbGVuIEpv aG5zb24gd3JvdGU6Cj4gPiA+IEhpIGxpYnZvcmJpcyBkZXZlbG9wZXJzIQo+ID4gPiBJ4oCZbSB3 b25kZXJpbmcgaWYgeW91IGhhZCBhIGNoYW5jZSB0byBzZWUgbXkgcmVxdWVzdCBmb3IKPiA+ID4g cmVsZWFzaW5nIGEgCj4gPiA+IG5ldyBsaWJ2b3J2aXMgdmVyc2lvbiDigJMgdGhpcyBpcyB0byBo YXZlIGFuIG9mZmljaWFsIGxpYnZvcmJpcwo+ID4gPiByZWxlYXNlIAo+ID4gPiBjb250YWluaW5n IHRoZSBDVkUgZml4ZXMgdGhhdCBhcHBlYXIgdG8gYmUgZml4ZWQgaW4gdGhlIG1hc3Rlcgo+ID4g PiBicmFuY2guCj4gPiA+IElzIHRoZXJlIGFueXRoaW5nIHdlIGNhbiBkbyB0byBoZWxwIHdpdGgg Z2V0dGluZyBhIHJlbGVhc2Ugb3V0Pwo+ID4gPiBXZeKAmXJlIGhhcHB5IHRvIHdvcmsgd2l0aCB5 b3Ugb24gdGhpcy4gUGxlYXNlIGxldCB1cyBrbm93IGlmIHdlCj4gY2FuCj4gPiA+IGRvIAo+ID4g PiBhbnl0aGluZyB0byBoZWxwIG1vdmUgdGhpcyBhbG9uZy4KPiA+ID4gVGhhbmsgeW91IQo+ID4g PiBFbGxlbiBKb2huc29uCj4gPiA+IE1BVExBQiBBdWRpbywgVmlkZW8sIEltYWdlLCBhbmQgU2Np ZW50aWZpYyBEYXRhIEZvcm1hdHMKPiA+ID4gTWF0aFdvcmtzCj4gPiA+IAo+ID4gPiAKPiA+ID4g RnJvbTogRWxsZW4gSm9obnNvbgo+ID4gPiBTZW50OiBUdWVzZGF5LCBNYXkgMjYsIDIwMjAgNTo0 OCBQTQo+ID4gPiBUbzogdm9yYmlzLWRldkB4aXBoLm9yZwo+ID4gPiBTdWJqZWN0OiBsaWJ2b3Ji aXMgcmVsZWFzZSBmb3IgcmVjZW50IENWRSBmaXhlcz8KPiA+ID4gCj4gPiA+IEhpIGxpYnZvcmJp cyBkZXZlbG9wZXJzLCAKPiA+ID4gSSBob3BlIHlvdSBhbGwgYXJlIHdlbGwhCj4gPiA+IEhlcmUg YXQgTWF0aFdvcmtzIHdlIHVzZSBsaWJ2b3JiaXMgYXMgcGFydCBvZiBvdXIgTUFUTEFCIGF1ZGlv Cj4gPiA+IEkvTyAKPiA+ID4gZnVuY3Rpb25hbGl0eSwgYW5kIG91ciBjdXJyZW50IHZlcnNpb24g aXMgeW91ciBsYXRlc3QgdmVyc2lvbgo+ID4gPiAxLjMuNi4KPiA+ID4gV2XigJl2ZSBoYWQgdGhl IGZvbGxvd2luZyBsaWJ2b3JiaXMgQ1ZFcyByZXBvcnRlZCB0byB1cyB3aGljaAo+IGFwcGVhcgo+ ID4gPiB0byAKPiA+ID4gYmUgZml4ZWQgaW4geW91ciBnaXRsYWIgbWFzdGVyIGJyYW5jaCBhbmQg d2hpY2ggaW1wYWN0IG91cgo+IGN1c3RvbWVyCj4gPiA+IHdvcmtmbG93czoKPiA+ID4gQ1ZFLTIw MTgtMTAzOTIgKGxvb2tzIGxpa2UgaXTigJlzIGZpeGVkIHZpYSBnaXRsYWIgaXNzdWUgMjMzNSkK PiA+ID4gQ1ZFLTIwMTgtMTAzOTMgKGxvb2tzIGxpa2UgaXTigJlzIGZpeGVkIHZpYSBnaXRsYWIg aXNzdWUgMjMzNCwKPiA+ID4gYnV0IAo+ID4gPiB0aGUgbGluayB0byBpdHMgZHVwbGljYXRlIGlz c3VlIDIzMzAgZG9lcyBub3Qgd29yayBzbyBJ4oCZbSBub3QKPiAxMDAlIAo+ID4gPiBzdXJlIGlm IHRoaXMgaXMgZml4ZWQpCj4gPiA+IENhbiB5b3UgcGxlYXNlIGRvIGEgcG9pbnQgcmVsZWFzZSBz byB0aGF0IHdlIGNhbiBiZSBzZWN1cml0eSAKPiA+ID4gY29tcGxpYW50IGZvciBvdXIgTUFUTEFC IGN1c3RvbWVycz8KPiA+ID4gVGhhbmsgeW91IQo+ID4gPiBFbGxlbiBKb2huc29uCj4gPiA+IE1B VExBQiBBdWRpbywgVmlkZW8sIEltYWdlLCBhbmQgU2NpZW50aWZpYyBEYXRhIEZvcm1hdHMKPiA+ ID4gTWF0aFdvcmtzCj4gPiA+IAo+ID4gPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXwo+ID4gPiBWb3JiaXMtZGV2IG1haWxpbmcgbGlzdAo+ID4gPiBWb3Ji aXMtZGV2QHhpcGgub3JnCj4gPiA+IGh0dHA6Ly9saXN0cy54aXBoLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3ZvcmJpcy1kZXYuCj4gPiA+IHhpcGgub3JnCgpfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXwpWb3JiaXMtZGV2IG1haWxpbmcgbGlzdApWb3JiaXMtZGV2 QHhpcGgub3JnCmh0dHA6Ly9saXN0cy54aXBoLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3ZvcmJpcy1k ZXYK