Path to this page:
Subject: CVS commit: [pkgsrc-2017Q4] pkgsrc/audio/libvorbis
From: S.P.Zeidler
Date: 2018-03-16 22:37:30
Message id: 20180316213730.B866FFB40@cvs.NetBSD.org
Log Message:
Pullup ticket #5722 - requested by maya
audio/libvorbis: security update
Revisions pulled up:
- audio/libvorbis/Makefile 1.60
- audio/libvorbis/distinfo 1.26
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: maya
Date: Fri Mar 16 20:23:53 UTC 2018
Modified Files:
pkgsrc/audio/libvorbis: Makefile distinfo
Log Message:
libvorbis: update to 1.3.6. security fix.
libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% \
fewer shells)"
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.
* Appveyor support
* Travis CI support
* Add secondary CMake build system.
* Build system fixes
To generate a diff of this commit:
cvs rdiff -u -r1.59 -r1.60 pkgsrc/audio/libvorbis/Makefile
cvs rdiff -u -r1.25 -r1.26 pkgsrc/audio/libvorbis/distinfo
Files: