Revisions of libvorbis

buildservice-autocommit accepted request 819974 from Martin Hauke's avatar Martin Hauke (mnhauke) (revision 3)
auto commit by copy to link target
Martin Hauke's avatar Martin Hauke (mnhauke) committed (revision 2)
- Update to version 1.3.7
  * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read
    encoding very low sample rates
  * Fix CVE-2017-14160 - out-of-bounds read encoding very low
    sample rates.
  * Fix handling invalid bytes per sample arguments.
  * Fix handling invalid channel count arguments.
  * Fix invalid free on seek failure.
  * Fix negative shift reading blocksize.
  * Fix accepting unreasonable float32 values.
  * Fix tag comparison depending on locale.
  * Fix unnecessarily linking libm.
  * Fix memory leak in test_sharedbook.
  * Distribute CMake build files with the source package.
  * Remove unnecessary configure --target switch.
  * Add OSS-Fuzz support.
  * Build system and integration updates.
- Drop not longer needed patches (fixed by upstream):
  * vorbis-CVE-2017-14160.patch
  * vorbis-CVE-2018-10392.patch
  * vorbis-CVE-2018-10393.patch
- Add source verification
Martin Hauke's avatar Martin Hauke (mnhauke) committed (revision 1)
Displaying all 3 revisions
openSUSE Build Service is sponsored by