Commit Graph

3 Commits

Author SHA1 Message Date
Peter Korsgaard
9754a77f74 libvorbis: security bump to version 1.3.6
Fixes CVE-2018-5146: Prevent out-of-bounds write in codebook decoding.

Drop 0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch and
0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch as they are
now upstream, and add a hash for the license file while we're at it.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit eca03d6774)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 1f11463b3d)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2018-04-10 21:45:15 +02:00
Peter Korsgaard
9142661f40 libvorbis: bump version
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2015-03-03 08:51:40 +01:00
Jörg Krause
c4b035a68c package/libvorbis: add hash file
Signed-off-by: Jörg Krause <jkrause@posteo.de>
Acked-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
2014-10-17 16:24:35 +02:00