Path to this page:
Next | Query returned 1 messages, browsing 1 to 10 | previous
CVS Commit History:
2018-03-16 22:37:30 by S.P.Zeidler | Files touched by this commit (2) | |
Log message:
Pullup ticket #5722 - requested by maya
audio/libvorbis: security update
Revisions pulled up:
- audio/libvorbis/Makefile 1.60
- audio/libvorbis/distinfo 1.26
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: maya
Date: Fri Mar 16 20:23:53 UTC 2018
Modified Files:
pkgsrc/audio/libvorbis: Makefile distinfo
Log message:
libvorbis: update to 1.3.6. security fix.
libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% \
fewer shells)"
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.
* Appveyor support
* Travis CI support
* Add secondary CMake build system.
* Build system fixes
To generate a diff of this commit:
cvs rdiff -u -r1.59 -r1.60 pkgsrc/audio/libvorbis/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/audio/libvorbis/distinfo
|
Next | Query returned 1 messages, browsing 1 to 10 | previous