Pullup ticket #5722 - requested by maya
audio/libvorbis: security update

Revisions pulled up:
- audio/libvorbis/Makefile                                      1.60
- audio/libvorbis/distinfo                                      1.26

-------------------------------------------------------------------
  Module Name: pkgsrc
  Committed By: maya
  Date: Fri Mar 16 20:23:53 UTC 2018

  Modified Files:
  pkgsrc/audio/libvorbis: Makefile distinfo

  Log Message:
  libvorbis: update to 1.3.6. security fix.

  libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)"

  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes

  To generate a diff of this commit:
  cvs rdiff -u -r1.59 -r1.60 pkgsrc/audio/libvorbis/Makefile
  cvs rdiff -u -r1.25 -r1.26 pkgsrc/audio/libvorbis/distinfo

(spz)