summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorThomas Daede <daede003@umn.edu>2018-03-15 20:34:28 -0700
committerThomas Daede <daede003@umn.edu>2018-03-16 09:19:48 -0700
commit6a6bad3af5fb35977867d8efbeecb7b610fcc333 (patch)
tree56c071c776ca5bde6f5e1c13bfb5ed8bdd9fb8e6
parent2ab6fbe005d61f7ea66fa038113894774c3147e8 (diff)
downloadlibvorbis-git-6a6bad3af5fb35977867d8efbeecb7b610fcc333.tar.gz
Update CHANGES and dates for 1.3.6.
-rw-r--r--CHANGES13
-rw-r--r--COPYING2
-rw-r--r--README.md2
3 files changed, 15 insertions, 2 deletions
diff --git a/CHANGES b/CHANGES
index c98ccfc2..5db9d05f 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,16 @@
+libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)"
+
+* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
+* Fix CVE-2017-14632 - free() on unitialized data
+* Fix CVE-2017-14633 - out-of-bounds read
+* Fix bitrate metadata parsing.
+* Fix out-of-bounds read in codebook parsing.
+* Fix residue vector size in Vorbis I spec.
+* Appveyor support
+* Travis CI support
+* Add secondary CMake build system.
+* Build system fixes
+
libvorbis 1.3.5 (2015-03-03) -- "Xiph.Org libVorbis I 20150105 (⛄⛄⛄⛄)"
* Tolerate single-entry codebooks.
diff --git a/COPYING b/COPYING
index 8f1d18cc..153b926a 100644
--- a/COPYING
+++ b/COPYING
@@ -1,4 +1,4 @@
-Copyright (c) 2002-2015 Xiph.org Foundation
+Copyright (c) 2002-2018 Xiph.org Foundation
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
diff --git a/README.md b/README.md
index 1748ee28..5e7e5010 100644
--- a/README.md
+++ b/README.md
@@ -145,5 +145,5 @@ USE, DISTRIBUTION AND REPRODUCTION OF THIS LIBRARY SOURCE IS
GOVERNED BY A BSD-STYLE SOURCE LICENSE INCLUDED WITH THIS SOURCE
IN 'COPYING'. PLEASE READ THESE TERMS BEFORE DISTRIBUTING.
-THE OggVorbis SOURCE CODE IS COPYRIGHT (C) 1994-2015
+THE OggVorbis SOURCE CODE IS COPYRIGHT (C) 1994-2018
by the Xiph.Org Foundation https://www.xiph.org/