CVSROOT:        /cvs
Module name:    ports
Changes by:     na...@cvs.openbsd.org   2018/03/16 15:53:13

Modified files:
        audio/libvorbis: Tag: OPENBSD_6_2 Makefile distinfo 
        audio/libvorbis/patches: Tag: OPENBSD_6_2 patch-configure 
        audio/libvorbis/pkg: Tag: OPENBSD_6_2 PLIST 

Log message:
Security update to 1.3.6:
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.

Reply via email to