Declan Kelly wrote: > Is anyone from the Rockbox project on this list? > If the CVE issue affects playback (on architectures that can run > Rockbox) then a new Rockbox release should have the new FLAC code. IIRC Rockbox uses ffmpeg decoder.