[Flac] FLAC 1.3.4 release

Ralph Giles giles at thaumas.net
Tue Feb 22 03:18:56 UTC 2022


Hi all,

There's a new flac release available. The addresses various robustness 
and security issues since the previous release, including CVE-2021-0561.

When building with MSVC, using CMake is preferred, see the README under 
"Building with CMake" for more information. Building with MSVC using 
solution files is deprecated and these files will be removed in the future.


    Downloads

Source packages are available as well as Window binaries.

  * https://downloads.xiph.org/releases/flac/flac-1.3.4.tar.xz
  * https://downloads.xiph.org/releases/flac/flac-1.3.4-win.zip
  * https://gitlab.xiph.org/xiph/flac/-/releases/1.3.4
  * https://github.com/xiph/flac/releases/tag/1.3.4


    Package checksums

  * |8ff0607e75a322dd7cd6ec48f4f225471404ae2730d0ea945127b1355155e737|
    flac-1.3.4.tar.xz
  * |0476f66a58a2b8b411585bd61d0ae0c2a39708c325ab1c0ce92d46044676ffe1|
    flac-1.3.4-win.zip


    Changes


      General

  * Fix 12 decoder bugs found by oss-fuzz, including CVE-2020-0499
    (erikd, Martijn van Beurden)
  * Fix encoder bug CVE-2021-0561 (NeelkamalSemwal)
  * Integrate oss-fuzzers (erikd, Guido Vranken)
  * Seeking fixes (NeelkamalSemwal, Robert Kausch)
  * Various fixes and improvements (Andrei Astafev, Rosen Penev, Håkan
    Kvist, oreo639, erikd, Tamás Zahola, Ulrik Mikaelsson, Tyler Dunn, tmkk)


      Format

  * FLAC format
      o no changes
  * Ogg FLAC format:
      o no changes


      Commands

  * flac:
    Various fixes and improvements (Andrei Astafev, Martijn van Beurden)
  * metaflac:
    (none)


      Build system

  * CMake improvements (evpobr, Vitaliy Kirsanov, erikd, Ozkan Sezer,
    Tyler Dunn, tg-m DeadSix27, ericLemanissier, Chocobo1).
  * Fixes for MinGW and MSVC (Ozkan Sezer).
  * Fix for clang (Ozkan Sezer)
  * Fix for PowerPC (Peter Seiderer, Thomas BERNARD)
  * Fix for FreeBSD PowerPC (pkubaj).


      Testing and Validation

  * Add Windows target to CI, improve logging (Ralph Giles)
  * CI improvements (Ralph Giles, Ewout ter Hoeven)


      Documentation

  * Doxygen fixes (Tyler Dunn)
  * Fix typos (Tim Gates, maxz)


      Library interface changes

  * libFLAC:
      o (none)
  * libFLAC++:
      o (none)

Thanks to everyone who contributed to this release, and especially to 
Martijn van Beurden for helping with review and release management.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.xiph.org/pipermail/flac/attachments/20220221/5cb2f36c/attachment.htm>


More information about the Flac mailing list