On 23 Nov 2014, at 15:06, MauritsVB <mauritsvb at xs4all.nl> wrote:> > On 23 Nov 2014, at 14:49, Martijn van Beurden <mvanb1 at gmail.com> wrote: > >> Considering Windows binaries: in case no new binaries are provided, please at least remove the old ones from sourceforge. As can be gleaned from some bug reports, support requests etc. on sourceforge, people are still happily downloading old versions. > > Agreed. Particularly if there is a CVE issue it makes sense to stop suggesting 1.2.1 is the most recent version at all the places we have some control over.On 23 Nov 2014, at 15:06, lvqcl <lvqcl.mail at gmail.com> wrote:> So they won't be able to find and download anything?I mean at least replacing those where Sourceforge/Xiph currently offers 1.2.1 as the most recent one with an official Xiph build. Official builds for other platforms are a bonus. I believe Erik previously mentioned they would have access to a Mac for an OS X build. -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.xiph.org/pipermail/flac-dev/attachments/20141123/3636d02a/attachment.htm
On Sun, Nov 23, 2014 at 03:19:53PM +0000, mauritsvb at xs4all.nl wrote:> >> Considering Windows binaries: in case no new binaries are provided, please at least remove the old ones from sourceforge. As can be gleaned from some bug reports, support requests etc. on sourceforge, people are still happily downloading old versions. > > > > Agreed. Particularly if there is a CVE issue it makes sense to stop suggesting 1.2.1 is the most recent version at all the places we have some control over.I posted a "heads up" to the Facebook page just now. No mention of a CVE, just that there is a new release coming this week. https://www.facebook.com/flac.audio It has the official website listed as https://xiph.org/flac Is anyone from the Rockbox project on this list? If the CVE issue affects playback (on architectures that can run Rockbox) then a new Rockbox release should have the new FLAC code. -- -Dec. --- (no microsoft products were used to create this message)
Declan Kelly wrote:> Is anyone from the Rockbox project on this list? > If the CVE issue affects playback (on architectures that can run > Rockbox) then a new Rockbox release should have the new FLAC code.IIRC Rockbox uses ffmpeg decoder.