CVSROOT: /cvs Module name: ports Changes by: na...@cvs.openbsd.org 2018/03/16 15:53:13
Modified files: audio/libvorbis: Tag: OPENBSD_6_2 Makefile distinfo audio/libvorbis/patches: Tag: OPENBSD_6_2 patch-configure audio/libvorbis/pkg: Tag: OPENBSD_6_2 PLIST Log message: Security update to 1.3.6: * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding. * Fix CVE-2017-14632 - free() on unitialized data * Fix CVE-2017-14633 - out-of-bounds read * Fix bitrate metadata parsing. * Fix out-of-bounds read in codebook parsing. * Fix residue vector size in Vorbis I spec.