v1.3.7
object 0657aee69dec8508a0011f47f3b69d7538e9d262
authorRalph Giles <giles@thaumas.net>
Sat, 4 Jul 2020 06:18:40 +0000 (23:18 -0700)
libvorbis 1.3.7 (2020-07-04) -- "Xiph.Org libVorbis I 20200704 (Reducing Environment)"

* Fix CVE-2018-10393 - out-of-bounds read encoding very low sample rates.
* Fix CVE-2017-14160 - out-of-bounds read encoding very low sample rates.
* Fix handling invalid bytes per sample arguments.
* Fix handling invalid channel count arguments.
* Fix invalid free on seek failure.
* Fix negative shift reading blocksize.
* Fix accepting unreasonable float32 values.
* Fix tag comparison depending on locale.
* Fix unnecessarily linking libm.
* Fix memory leak in test_sharedbook.
* Update Visual Studio projects for ogg library filename change.
* Distribute CMake build files with the source package.
* Remove unnecessary configure --target switch.
* Add gitlab CI support.
* Add OSS-Fuzz support.
* Build system and integration updates.
-----BEGIN PGP SIGNATURE-----
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=3CTX
-----END PGP SIGNATURE-----