libvorbisfile3-1.3.6-4.3.1 4 > $
A p [p9|Z m :\۶ŘqϢ(QHQ?95sA~-XfuήUzz G2 *85O} IH Y_V4e>A*|1e^iRe&ħ4#|+椽6@V9^םDk>#27m2;> 3ca zb6FC<0\x;Ę\u ә 3s U~m2d(n3N|.,bffe78c058c015fcb728e6be1e4e76f8c9a51f0b aedb6bf44d4a944e6fe90f0b7150bea6bd492a4a261de2d986bd9e46f32bf40b ] [p9|WT ^>pJyy$TDMq E 5iqQGnR觤Uh53L:Mg/t/Ԕ3O}NnE^ĿW҃IxU g~9e&:POgHe
]w$BH0.¨(&
TU\J>52Xp^sG=k{\%ߎ@FS 73܂Ie١&*_b5#ri7jFI > p @ &$ ? & d H x |
$ (
, 4 v
L
t
( 8 9 : > " @ # F # G #, H #4 I #< X #@ Y #L \ #h ] #p ^ # b # c $O d $ e $ f $ l $ u $ v $ w % x % y % z % % % % & C libvorbisfile3 1.3.6 4.3.1 The Vorbis General Audio Compression Codec Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and
general-purpose compressed audio format for audio and music at fixed
and variable bit rates from 16 to 128 kbps/channel.
The native bitstream format of Vorbis is libogg (Ogg). Alternatively,
libmatroska (matroska) can also be used. [s390lpd SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ System/Libraries http://www.vorbis.com/ linux s390x [d[g 37e4749c77a93ac40b6365d58b3b3940a0d52718441a76161cfc01514670ff32 libvorbisfile.so.3.3.7 root root root root libvorbis-1.3.6-4.3.1.src.rpm libvorbisfile.so.3()(64bit) libvorbisfile3 libvorbisfile3(s390-64) @ @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.4)(64bit) libm.so.6()(64bit) libm.so.6(GLIBC_2.2)(64bit) libogg.so.0()(64bit) libvorbis.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 [{@ZZ@ZZZ8@X=mTSS Qm=@Q1O@OC@N@Nσ@NˎN[@M@M@Ls@Ls@K
@K(J@JhPJ?r@tiwai@suse.de tiwai@suse.de tiwai@suse.de tiwai@suse.de tiwai@suse.de tiwai@suse.de aloisio@gmx.com mpluskal@suse.com fcrozat@suse.com andreas.stieger@gmx.de mmeister@suse.com seife+obs@b1-systems.com ftake@geeko.jp tiwai@suse.de idonmez@suse.com crrodriguez@opensuse.org coolo@suse.com crrodriguez@opensuse.org dmueller@suse.de davejplater@gmail.com coolo@novell.com reddwarf@opensuse.org tiwai@suse.de jengelh@medozas.de tiwai@suse.de tiwai@suse.de coolo@novell.com - Replace vorbis-CVE-2017-14160.patch with the upstream fix
(commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
(CVE-2018-10392, bsc#1091070):
vorbis-CVE-2018-10392.patch - Fix out-of-bounds access inside bark_noise_hybridmp function
(CVE-2017-14160, bsc#1059812):
downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
(CVE-2018-10393, bsc#1091072):
downstream fix: vorbis-CVE-2018-10393.patch - Split libvorbis-doc subpackage to a separate spec file for
reducing the dependencies - Update to version 1.3.6:
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.
* Appveyor support
* Travis CI support
* Add secondary CMake build system.
* Build system fixes
- Build documents with doxygen, and many tex stuff;
this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
vorbis-fix-linking.patch
0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
libvorbis-CVE-2018-5146.patch - Fix VUL-0: libvorbis: Out of bounds memory write while processing
Vorbis audio data (CVE-2018-5146, bsc#1085687):
libvorbis-CVE-2018-5146.patch - Fix VUL-0: out-of-bounds array read vulnerability exists in
function mapping0_forward() (CVE-2017-14633, bsc#1059811):
0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
memory in function vorbis_analysis_headerout(CVE-2017-14632,
bsc#1059809):
0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch - Added 32bit libvorbis-devel in baselibs.conf - Cleanup spec file with spec-cleaner
- Update to 1.3.5
* Tolerate single-entry codebooks.
* Fix decoder crash with invalid input.
* Fix encoder crash with non-positive sample rates.
* Fix issues in vorbisfile's seek bisection code.
* Spec errata.
* Reject multiple headers of the same type.
* Various build fixes and code cleanup. - Fix obsoletes and provides in baselibs.conf. - Xiph libvorbis 1.3.4
* reduced static data size in libvorbisenc
* associated minor changes required to libvorbis and libvorbisfile
* minor build fixes and build system updates
* no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes - Added url as source.
Please see http://en.opensuse.org/SourceUrls - fix build with automake-1.13.1 - updated to 1.3.3
* vorbis: additional proofing against invalid/malicious
streams in decode (see SVN for details).
* vorbis: fix a memory leak in vorbis_commentheader_out().
* updates, corrections and clarifications in the Vorbis I
specification document
* build warning fixes - VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
(bnc#747912) - -O20 optimization level doesn't exist, use -O3 - open files with O_CLOEXEC, in order to avoid fd leaks
when calling applications fork() ..execve()...
This patch does not cover the executable tools since
it is not critical for them. - add libtool as buildrequire to avoid implicit dependency - Fix build with no-add-needed - fix provides/obsoletes in baselibs - Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services. - fix the package split - updated to version 1.3.2
* vorbis: additional proofing against invalid/malicious
streams in floor, residue, and bos/eos packet trimming
code (see SVN for details).
* vorbis: Added programming documentation tree for the
low-level calls
* vorbisfile: Correct handling of serial numbers array
element [0] on non-seekable streams
* vorbisenc: Back out an [old] AoTuV HF weighting that was
first enabled in 1.3.0; there are a few samples where I
really don't like the effect it causes.
* vorbis: return correct timestamp for granule positions
with high bit set.
* vorbisfile: the [undocumented] half-rate decode api made no
attempt to keep the pcm offset tracking consistent in seeks.
Fix and add a testing mode to seeking_example.c to torture
test seeking in halfrate mode. Also remove requirement that
halfrate mode only work with seekable files.
* vorbisfile: Fix a chaining bug in raw_seeks where seeking
out of the current link would fail due to not
reinitializing the decode machinery.
* vorbisfile: improve seeking strategy. Reduces the
necessary number of seek callbacks in an open or seek
operation by well over 2/3.
- updated to version 1.3.1
* tweak + minor arithmetic fix in floor1 fit
* revert noise norm to conservative 1.2.3 behavior pending
more listening testing
- updated to versio 1.3.0
* Optimized surround support for 5.1 encoding at 44.1/48kHz
* Added encoder control call to disable channel coupling
* Correct an overflow bug in very low-bitrate encoding on 32 bit
machines that caused inflated bitrates
* Numerous API hardening, leak and build fixes
* Correct bug in 22kHz compand setup that could cause a crash
* Correct bug in 16kHz codebooks that could cause unstable pure
tones at high bitrates
- run spec-cleaner
- removed libvorbis-automake-fix.diff, libvorbis-doc-fixes.diff,
libvorbis-r16326-CVE-2009-3379.diff and
libvorbis-r16597-CVE-2009-3379.diff (upstream fixed)
- follow library packaging policy
- run make check - VUL-0: libvorbis: memory corruption while parsing ogg files
(bnc#608192, CVE-2009-3379) - add baselibs.conf as a source
- enable parallel building
- package documentation as noarch - updated to version 1.2.3:
* correct a vorbisfile bug that prevented proper playback of
Vorbis files where all audio in a logical stream is in a
single page
* Additional decode setup hardening against malicious streams
* Add 'OV_EXCLUDE_STATIC_CALLBACKS' define for developers who
wish to avoid avoid unused symbol warnings from the static
callbacks defined in vorbisfile.h
- updated to version 1.2.2:
* define VENDOR and ENCODER strings
* seek correctly in files bigger than 2 GB (Windows)
* fix regression from CVE-2008-1420; 1.0b1 files work again
* mark all tables as constant to reduce memory occupation
* additional decoder hardening against malicious streams
* substantially reduce amount of seeking performed by Vorbisfile
* Multichannel decode bugfix
* build system updates
* minor specification clarifications/fixes
- dropped aotuv patch temporarily - updated to aoTuV patch version beta5.7:
* including security fixes
* improved encoding speed of low bitrate mode
* reduced distrotion by clipping at low sampling frequency
* fixed noise control part of impulse block
* tuning of each part was redone
* expanded noise control of the impulse block
* fixed pre-echo reduction code
* noise normalization reviewed
* detailed tuning done again - fix build with automake 1.11 /sbin/ldconfig /sbin/ldconfig s390lpd 1528204720 1.3.6-4.3.1 1.3.6-4.3.1 libvorbisfile.so.3 libvorbisfile.so.3.3.7 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:7657/SUSE_SLE-15_Update/1ba9f2f4029dd470cea8d32384527542-libvorbis.SUSE_SLE-15_Update cpio xz 5 s390x-suse-linux ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, BuildID[sha1]=864b84abc4002c7371dcda9a068ce583208e38c4, stripped P R R R R R R R GSc utf-8 4650730e057c2699f6acb0bfa45cf54eab9c496116e829a2578dd8fe6e59fa8f ? 7zXZ
! t/3]
cr$x#I{ݹR:YU77S*
ʄP|/U<5.t e}m 6wImY7ġ.ޱ)-51r?F̔|e̋%{x0;ܭ[(6xܱsvh]yn-D:Xxw,K ɸ$O, ؟r@P+Gv^3P ge*hv^)/-:+"~e0/x/zj>C vJj3l5y &?2=m_
Ḱtp\H摾8
CAQ[`b}c
|`Z~2 ]Mb|Je֢&!>
&GыǪw>jƎsf@pfS]/>`ί:iY%iƭp%+A8,/G4'ɺ)PzJߑK9.]|Qi 9[އ?~۴Uk[Ǟ^z M$({(F;Ozq [Ʒ}<3ԤqgLO#evJھ{ &Q TGG͌# w%Xkjjk f*"{aǟM܇ ݡ?~yPyiXsϨ塍\ ^Ӝz 7qnG0Nۨb#MeP4E! {p) {H3_/
IS8١ 4shBAm@- +zKS'B|Q}_o$Tz04hyͺQ@@\jn
Wy"[;piHn˸;MC|3 & ¨J֗D
1OW81ND 0/L̢ 1 幅Q8 SK<*csp(Z+ $I\2M0;MG = ڱ==/v\
Cu
t ( XkN^?]Lvffc GV32fҝad vkxO_RK m\':%VJjdYO|t~: A;cZT?I9YIwO1RzK0o}xI&&"LfupY !FABw Iu'͘$v*& f6w'xRr͚?'¾V+ A$ nAˋxD"w '@Xe[ẖB3ZUzّS2|}v\Ȝ1'bT5L[UG+{iJaN1r LͿ*o@'AƩi) 4 HoJ]o
o lHN8sH-y0%Т^Uw]ˑ"b8k$qbȾ
-n*Yq
GFI"sNֶQm4f9/ԦXtC6u -*o- 0:B=,T]0!]G86QEhʶZuBaGT()8Lw͎8$uhQ*l;dQ$PeM* K^vb e s!ᆜV[³O-Q
#J eh( `.s*&Z懺˙| 3 S bM~2!1or6[r&!9:0MADÝo0d7X(hL: ?PWyO`Dbx"/d&;2աvٟ LɇoĜ?+/r~<4zI XxGx^a̟vW Dd/ #y+>gO|;N?h| ӣ$ %J OzV8C[eMm[ Wpm8aiKZ9`o!j0WDoxU%w^Xa Qϧ 孎yjn{wELϸauֻN/:ﳁOMJ;\ y5!d%Ũ21@[N_,0Fgm d,f[2 &qT/-[-R]Y{Y/'R\['Um\m 3jJ 6Um![ޯd+>LJk5K!MJ\^韃@`Zk-saX/a|F:T|.$)!&gU8d@Pgu}}
':Txc 5_
!~.JP}E,!0Z
u# | E[kD즖"oݬp~5 Rk2v-0['&&ZYxTgf+Cs'`]Dᡁ\ RFe_$-tܵ~h}T/vmaJ'ý}7rG xv67?M HBYwbk`DSLv
n XhGBr;i
̷PH,i> 9ǔɸ6)g|f.#0.ꃻFG
Gh0MǫhA{vrs~Ųv~c5٥V; qؤnyW:]/+ t#> ,A& C6{u1NLz U8M #ް]s~0AUJ
ShzAR u{T|XYyNpiߛ@Bט>H_\oé羏Pۨ RC]e.8(5]LLJ(Om.\ZOc߅L 634ja>JK ! "F#EQ9ccwCIJt9TM[I T\張Lؒuqݭ?Cc QQlΥW 8Yd_vjų( ڒ nD,rCzoqk8
'҅}F"S̥3 %4bs:08ʅa?]h'1"i)܀ސ/AP$z߾t ˋFKlw6K\e Ps+4xn#a,@ĚK:!bwޏXp33ͨòU~$wK|3gІ#I =C~d8w|X+\ 1RgQP! t' /we_@s}-z{#
ޞ .`Vp.J`-#h
C:&cO3V;/f bG҇
vuoď8'bV5zK/8Vg=/mat&guDBx{bY$6@ZY
؞Iea{ǒh~_w[o#l̙ua^9%=9>P:<U-߷c@O7ma(c51Ss^)0uH7\;ӝ=/ !bXƽXNd:ƁNWTFEpƭdR[I@KdX+z#}Dlj-^ LǸ?EoGB|H`DUw$jTV6)b<%Z
.k_9VQh
^0IbHoMMb9pQZ9},GW-o@V87C鈜($mM$Bv
beN)#)
KTrǂd?sQA!w1ZYڍI1|j)LX bX_mӿ-I^[OF`@]a
q- |b"}H)lD$
z,)%8]NƷÆ#QE\8Wڸv ̧SYG+so>٥\2 He)AO h a(;/,v|Ԣ923JE医.h 1CF[R>SL閲 qH5.} 6m1bŽn\l^b RPA/N/^fa22;)t6}oEȀY
߲]z1sI`,խZ3 J+ Bx:S{}jq3=,]+ݧj E)O\.zC*,sohXYbgf߂!\ul9Ø[*F jP6-$٘Lm{E&2`M9#
Fь-B/6̈%w^bPXzxbBaN#^}h]"wV Vj#[mwIcAw.s6[U% vP5w1^O4qu3MA-w
{.#FWe:e($ ~mFn|2K+.am@ׅVzH'/Q fٚ H֯^qخ+"ijm7a1 uУ #_23FX56 w'){@V eվԾ ¼X#NPY~lkvA>[N<{# n4 R>4xŞegP{\]HZmЂ*5;r!aA.Z(&m_98+^L25 C lxY@8o!/rgzC Ohbv 2a0e wK
q{kV}lbi'ɛ :8- %,KM/PrIF-jVImfߙ~ 8;sxbcaTfөXd#4Xwhf~ a[.6?s21-Ђly!/t0_ ؕ2s]yuIjhc6h]Y h$/^Z*#V
OmA
G~B SE 6? 'vG L3ҢDMYS)L[0 Z
N.wdFMd+ ySVf 5 Qh B
p &&X b.^KĘX.
5Dad krʊNJ7~-Pu,7*gi Xn{mi|p4H-} Ox8Ï` K_ ĩyhPDL;C 4͠ES Kg Ӊpslgm?7RX ~O 3T})$J \VXpϷ)u9I1;Qd9@](4]PoEC( $W:o2p~L?F b g+S^GJ
(vDxp 3:E|F>eFeu R}\
6un}%'I^vS64nSr[&DE=I@vf[Ķ:gs*'$[ܡbXZ3bA~| T`_ ~cyń>~NL Ss))x:\H JqTUz/>29 wvڔ!y#Y+Nv*%
VrKPZ#l/[20<}#F X0UiyxRZ *P s3L>m֊w)N;Ai/}9~5s&uܰAƺ~/:4āvD;W!Pi7qZ#jq& L$Η2e!.6rKՁJeD_Cg"Ұ+8 sA JG&PsRX試2nZc;Pz/Lp
N#dc`i/C$
5̰FNK# aRA۟Q>xp8:gnu0*#> =GŶNpJp ώd D?IhbTr)@EYojlQ R.
1ʵ#Jb]3>RϑuMu +f2X7Sg !&EnFל&тǵZW=p6kSC9ԙ[> $R@ԨԎ,RT!Q3ߎLgs
>j?*Y^1IAs`iy]qOY=A¨.~>^~$^~cf@; t j70kDj`%lq@GS @D ޓ</PJna! EVmGj bvR@Ωh6"mk myabq)J?:Jֲ&
-g4dHHo) &AwPbY ݓ_,Oʘ ?.Ei%% >{8}y?fCZs^gm#.˲˸$XiCʓp5^_Ixj5XX qc-}7$pY4+WU#>Fv^\ Dzzs 0ӉrTYzQ6ys{ՌLl
>MCC UčodΞaBY
z2;Q7
;,/FQ8jad,!&2MČ 6P&D$
\- lDUw xnS9h!cmH/0Js*_y,J
k6- c$FZKZ1/+}:˂^?mZA>?`RP
ά)0bcS~&d!4bǫÐ[mb: oҬ 6GLuҪDڇcR
Hjj}"U( 01h,t(}U{jxDb0H
l=S W"a n ^&$ LC _Z{
%
#d5 C4Á;(?`dkz e]4d4}Xq^Z\eܮ0oUWvh1$̛7<[3d ~Վ%wb8ͣR2RV]or .VV % . ڗw:ɣ/`>m@)+~]p?W=nO,XA1O,@O '`; Ҭ-xOܨ>\gU5|O@Ie[%Od^#R?<ШC9k֝al v~ (=罄}6xH#'͏"(+N ~D#|#X_Z2JUPizr8LxϾn_wegܤO
RQ %l;'3D;J {'5]/ ;CP!:vMKqSxK zc0EÚ~8瞣^습fQ6_g\XXL8
,$蛯~%-z SA t4"uP.K73c%F9TC' Ͳ pş(Is:p ט%._G&w.x
rq,/H@DYeqE9<8, Gtd3 ]%v8$iP'VW
Ųh WD_*ґ bf2Ƿ- Q_RwD-| &џC ɤmK"7I5W .Xh ],d`4)۪F|4oX\=g
l-> /7 ):n\/~kA%|U]M~
?꼼=; Dq%UjeYCM|/G!k`OQ+^^Aט#7?<-D۫IsqںŭFN 3ʆ pL&2QjIĘ&raoxcHN a?C_ n 6 gJguƭͥ'aOc$[m ZBs01`QeC` 0|fop
3%[l$UF
N yQ?R\8(h6 %
ְN'C:aX),l!,o
W@RؚGC6#}܉-W$<%Tֺqq$7KyɸptO[sUC5< xf6댿P[/l7YFXhKGP0qG[!b|T WO}aH?h{ '*6K%IlwQ$kli }E. nױ5_! )VodHcް]҆m)[Uko:_7<}YW:msz̻0'̲r*^l~ ?zOm]*(U0\Ea[YM t D-S9.=}hd
yvN%}x zrp%Jky lZ6^[ { Ȫ()B5ç\`y@%?rKNVNXp.43`t}CyYU}g &b<דqXw
R>, ((tL?D'p2=`8ń0^M5X HoF&KQwJp5?|zO7:*;/ u/nl((sM EhNE` t[7l_ EVTN[|nt P ? /kԓ(VcP$xK))cٿw66dA} S0jGږrԃ_M)ڭ35VhRO"2 n1^~.jePlNb{Ria_AKOZd߯%K96|\;ǔ=s<+tUǽ
}jвW͛iooL!w vAkKf& +Gl>|z&<1;f,tY/!:` k0%$OTO IcsMfz됓{6L9YYZPlQշ+#VbQജlg& Q6wxſjʯ(-6vs8
c8Ą6 n4l z
ևGS ܋Pe\=2ˇ7P^9K{Ǚ'|uUfobˋQ{1nJuVnqoufGh tt\ p@rDVӎTr M{ç5)l7ucbxYJVA ̤aO=GO|FC6v! $d !3QwVgnjH[|r_tM/,Prm?HW[g
ߙ۱ }ZE:Gܨs|EH-XM8*Pnɚ)* xPaqwU /gQEj62 c`-"`H
T쇱Qh_ f o
YZ