On 2/19/2015 10:53 PM, Yaakov Selkowitz wrote:
> On Tue, 2015-02-17 at 22:42 -0600, Yaakov Selkowitz wrote:
>> David,
>>
>> vorbis-tools requires a patch for CVE-2014-9640:
>>
>> http://pkgs.fedoraproject.org/cgit/vorbis-tools.git/plain/vorbis-tools-1.4.0-bz1185558.patch
>
> And now another one fo
On Tue, 2015-02-17 at 22:42 -0600, Yaakov Selkowitz wrote:
> David,
>
> vorbis-tools requires a patch for CVE-2014-9640:
>
> http://pkgs.fedoraproject.org/cgit/vorbis-tools.git/plain/vorbis-tools-1.4.0-bz1185558.patch
And now another one for CVE-2014-9638 and CVE-2014-9639:
http://pkgs.fedorapr
David,
vorbis-tools requires a patch for CVE-2014-9640:
http://pkgs.fedoraproject.org/cgit/vorbis-tools.git/plain/vorbis-tools-1.4.0-bz1185558.patch
There are other patches in that repo that you may wish to consider
adding; at a minimum, I would recommend the patch for vcut:
http://pkgs.fedorap
