diff options
author | Thomas Daede <daede003@umn.edu> | 2018-03-15 20:34:28 -0700 |
---|---|---|
committer | Thomas Daede <daede003@umn.edu> | 2018-03-16 09:19:48 -0700 |
commit | 6a6bad3af5fb35977867d8efbeecb7b610fcc333 (patch) | |
tree | 56c071c776ca5bde6f5e1c13bfb5ed8bdd9fb8e6 | |
parent | 2ab6fbe005d61f7ea66fa038113894774c3147e8 (diff) | |
download | libvorbis-git-6a6bad3af5fb35977867d8efbeecb7b610fcc333.tar.gz |
Update CHANGES and dates for 1.3.6.
-rw-r--r-- | CHANGES | 13 | ||||
-rw-r--r-- | COPYING | 2 | ||||
-rw-r--r-- | README.md | 2 |
3 files changed, 15 insertions, 2 deletions
@@ -1,3 +1,16 @@ +libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)" + +* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding. +* Fix CVE-2017-14632 - free() on unitialized data +* Fix CVE-2017-14633 - out-of-bounds read +* Fix bitrate metadata parsing. +* Fix out-of-bounds read in codebook parsing. +* Fix residue vector size in Vorbis I spec. +* Appveyor support +* Travis CI support +* Add secondary CMake build system. +* Build system fixes + libvorbis 1.3.5 (2015-03-03) -- "Xiph.Org libVorbis I 20150105 (⛄⛄⛄⛄)" * Tolerate single-entry codebooks. @@ -1,4 +1,4 @@ -Copyright (c) 2002-2015 Xiph.org Foundation +Copyright (c) 2002-2018 Xiph.org Foundation Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions @@ -145,5 +145,5 @@ USE, DISTRIBUTION AND REPRODUCTION OF THIS LIBRARY SOURCE IS GOVERNED BY A BSD-STYLE SOURCE LICENSE INCLUDED WITH THIS SOURCE IN 'COPYING'. PLEASE READ THESE TERMS BEFORE DISTRIBUTING. -THE OggVorbis SOURCE CODE IS COPYRIGHT (C) 1994-2015 +THE OggVorbis SOURCE CODE IS COPYRIGHT (C) 1994-2018 by the Xiph.Org Foundation https://www.xiph.org/ |