| tag name | v1.3.6 (134a0326daab05ecb838da7b1c658d382e521e44) |
| tag date | 2018-03-16 09:20:07 -0700 |
| tagged by | Thomas Daede <daede003@umn.edu> |
| tagged object | commit d22c3ab5f6... |
| download | libvorbis-git-1.3.6.tar.gz |
|---|
libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)"
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.
* Appveyor support
* Travis CI support
* Add secondary CMake build system.
* Build system fixes