---
- branch: MAIN
  date: Fri Mar 16 20:23:53 UTC 2018
  files:
  - new: '1.60'
    old: '1.59'
    path: pkgsrc/audio/libvorbis/Makefile
    pathrev: pkgsrc/audio/libvorbis/Makefile@1.60
    type: modified
  - new: '1.26'
    old: '1.25'
    path: pkgsrc/audio/libvorbis/distinfo
    pathrev: pkgsrc/audio/libvorbis/distinfo@1.26
    type: modified
  id: 20180316T202353Z.fe574d21815b493daba916d58dcbc71334da03c3
  log: |
    libvorbis: update to 1.3.6. security fix.

    libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)"

    * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
    * Fix CVE-2017-14632 - free() on unitialized data
    * Fix CVE-2017-14633 - out-of-bounds read
    * Fix bitrate metadata parsing.
    * Fix out-of-bounds read in codebook parsing.
    * Fix residue vector size in Vorbis I spec.
    * Appveyor support
    * Travis CI support
    * Add secondary CMake build system.
    * Build system fixes
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/audio/libvorbis'
  unixtime: '1521231833'
  user: maya