baserev update by copy to link target

• Files Changed
• Browse Source

- Use %patch -P N instead of deprecated %patchN.

- Use %patch -P N instead of deprecated %patchN.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Build AVX2 enabled hwcaps library for x86_64-v3
- Small spec file cleanup

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Remove bad %defattr - not needed and causes SHLIB non-executable
  rpmlint error

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Update to version 1.3.7
  * Fix CVE-2018-10392 and CVE-2018-10393 - out-of-bounds read
    encoding very low sample rates
  * Fix CVE-2017-14160 - out-of-bounds read encoding very low
    sample rates.
  * Fix handling invalid bytes per sample arguments.
  * Fix handling invalid channel count arguments.
  * Fix invalid free on seek failure.
  * Fix negative shift reading blocksize.
  * Fix accepting unreasonable float32 values.
  * Fix tag comparison depending on locale.
  * Fix unnecessarily linking libm.
  * Fix memory leak in test_sharedbook.
  * Distribute CMake build files with the source package.
  * Remove unnecessary configure --target switch.
  * Add OSS-Fuzz support.
  * Build system and integration updates.
- Drop not longer needed patches (fixed by upstream):
  * vorbis-CVE-2017-14160.patch
  * vorbis-CVE-2018-10392.patch
  * vorbis-CVE-2018-10393.patch
- Add source verification

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

Correct the changelog pointing to the right bug# / CVE.

• Files Changed
• Browse Source

- Fix NULL pointer dereference in vorbis_block_clear function in
  lib/block.c (CVE-2017-11735, bsc#1081829):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies


- Split from libvorbis.spec to reduce the build dependencies

• Files Changed
• Browse Source

- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch

• Files Changed
• Browse Source

- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source