Hi all,
There's a new flac release available. The addresses various robustness
and security issues since the previous release, including CVE-2021-0561.
When building with MSVC, using CMake is preferred, see the README under
"Building with CMake" for more information. Building with MSVC using
solution files is deprecated and these files will be removed in the future.
Downloads
Source packages are available as well as Window binaries.
* https://downloads.xiph.org/releases/flac/flac-1.3.4.tar.xz
* https://downloads.xiph.org/releases/flac/flac-1.3.4-win.zip
* https://gitlab.xiph.org/xiph/flac/-/releases/1.3.4
* https://github.com/xiph/flac/releases/tag/1.3.4
Package checksums
* |8ff0607e75a322dd7cd6ec48f4f225471404ae2730d0ea945127b1355155e737|
flac-1.3.4.tar.xz
* |0476f66a58a2b8b411585bd61d0ae0c2a39708c325ab1c0ce92d46044676ffe1|
flac-1.3.4-win.zip
Changes
General
* Fix 12 decoder bugs found by oss-fuzz, including CVE-2020-0499
(erikd, Martijn van Beurden)
* Fix encoder bug CVE-2021-0561 (NeelkamalSemwal)
* Integrate oss-fuzzers (erikd, Guido Vranken)
* Seeking fixes (NeelkamalSemwal, Robert Kausch)
* Various fixes and improvements (Andrei Astafev, Rosen Penev, H?kan
Kvist, oreo639, erikd, Tam?s Zahola, Ulrik Mikaelsson, Tyler Dunn, tmkk)
Format
* FLAC format
o no changes
* Ogg FLAC format:
o no changes
Commands
* flac:
Various fixes and improvements (Andrei Astafev, Martijn van Beurden)
* metaflac:
(none)
Build system
* CMake improvements (evpobr, Vitaliy Kirsanov, erikd, Ozkan Sezer,
Tyler Dunn, tg-m DeadSix27, ericLemanissier, Chocobo1).
* Fixes for MinGW and MSVC (Ozkan Sezer).
* Fix for clang (Ozkan Sezer)
* Fix for PowerPC (Peter Seiderer, Thomas BERNARD)
* Fix for FreeBSD PowerPC (pkubaj).
Testing and Validation
* Add Windows target to CI, improve logging (Ralph Giles)
* CI improvements (Ralph Giles, Ewout ter Hoeven)
Documentation
* Doxygen fixes (Tyler Dunn)
* Fix typos (Tim Gates, maxz)
Library interface changes
* libFLAC:
o (none)
* libFLAC++:
o (none)
Thanks to everyone who contributed to this release, and especially to
Martijn van Beurden for helping with review and release management.
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.xiph.org/pipermail/flac/attachments/20220221/5cb2f36c/attachment.htm>