From 6a6bad3af5fb35977867d8efbeecb7b610fcc333 Mon Sep 17 00:00:00 2001 From: Thomas Daede Date: Thu, 15 Mar 2018 20:34:28 -0700 Subject: Update CHANGES and dates for 1.3.6. --- CHANGES | 13 +++++++++++++ COPYING | 2 +- README.md | 2 +- 3 files changed, 15 insertions(+), 2 deletions(-) diff --git a/CHANGES b/CHANGES index c98ccfc2..5db9d05f 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,16 @@ +libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)" + +* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding. +* Fix CVE-2017-14632 - free() on unitialized data +* Fix CVE-2017-14633 - out-of-bounds read +* Fix bitrate metadata parsing. +* Fix out-of-bounds read in codebook parsing. +* Fix residue vector size in Vorbis I spec. +* Appveyor support +* Travis CI support +* Add secondary CMake build system. +* Build system fixes + libvorbis 1.3.5 (2015-03-03) -- "Xiph.Org libVorbis I 20150105 (⛄⛄⛄⛄)" * Tolerate single-entry codebooks. diff --git a/COPYING b/COPYING index 8f1d18cc..153b926a 100644 --- a/COPYING +++ b/COPYING @@ -1,4 +1,4 @@ -Copyright (c) 2002-2015 Xiph.org Foundation +Copyright (c) 2002-2018 Xiph.org Foundation Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions diff --git a/README.md b/README.md index 1748ee28..5e7e5010 100644 --- a/README.md +++ b/README.md @@ -145,5 +145,5 @@ USE, DISTRIBUTION AND REPRODUCTION OF THIS LIBRARY SOURCE IS GOVERNED BY A BSD-STYLE SOURCE LICENSE INCLUDED WITH THIS SOURCE IN 'COPYING'. PLEASE READ THESE TERMS BEFORE DISTRIBUTING. -THE OggVorbis SOURCE CODE IS COPYRIGHT (C) 1994-2015 +THE OggVorbis SOURCE CODE IS COPYRIGHT (C) 1994-2018 by the Xiph.Org Foundation https://www.xiph.org/ -- cgit v1.2.1