> > Hmm, it looks like you uploaded the -1 version of the libcurl2 package, > > but the -2 version contains the security fix: > > <http://cygwin.com/ml/cygwin-apps/2005-11/msg00229.html>.
Sorry about that - the problem stemmed from me trying to chase down several emails for the files to download, due to the churn on this topic. -2 is now uploaded; I also left the -1 there unless you tell me to remove it. Thanks for adopting the package, and addressing the security hole! > > Also, the vorbis-tools setup.hint needs to be edited to call for > libcurl2 instead of curl. Done. -- Eric Blake