X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;f=CHANGES;h=5db9d05fba5b7f2cd4dcc14fcd14a10b412a3193;hb=96f750a57b9235aa7674ec1a529952f9867dd559;hp=c98ccfc225a10d251f194a443ca572add5b53323;hpb=e9a1fd561632f7c9b7d2f58c95d374f8c9ab24f4;p=platform%2Fupstream%2Flibvorbis.git

diff --git a/CHANGES b/CHANGES
index c98ccfc..5db9d05 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,16 @@
+libvorbis 1.3.6 (2018-03-16) -- "Xiph.Org libVorbis I 20180316 (Now 100% fewer shells)"
+
+* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
+* Fix CVE-2017-14632 - free() on unitialized data
+* Fix CVE-2017-14633 - out-of-bounds read
+* Fix bitrate metadata parsing.
+* Fix out-of-bounds read in codebook parsing.
+* Fix residue vector size in Vorbis I spec.
+* Appveyor support
+* Travis CI support
+* Add secondary CMake build system.
+* Build system fixes
+
 libvorbis 1.3.5 (2015-03-03) -- "Xiph.Org libVorbis I 20150105 (⛄⛄⛄⛄)"
 
 * Tolerate single-entry codebooks.