libvorbisfile3-1.3.6-4.3.1 4 > $
A p [8p9|w ѨY תowt զx7Xss\)%`CAH}&"&5Z"
9h1ӛ+i mZlCCop!'k
Iw#6}F'\_*Zb_z^n2Z=Sbv_[$u?Gag %6;V ȕ4*h9I_!jj'UHʹo*?}$xt' Pvp @lb băƦ Bk^KA" i > p @ & ? % d H x |
$ (
, 4 v
H ` ( 8 9 : > " @ " F # G # H # I #( X #, Y #8 \ #T ] #\ ^ # b # c $; d $ e $ f $ l $ u $ v $ w %l x %t y %| z % % % % % C libvorbisfile3 1.3.6 4.3.1 The Vorbis General Audio Compression Codec Vorbis is a fully open, nonproprietary, patent-and-royalty-free, and
general-purpose compressed audio format for audio and music at fixed
and variable bit rates from 16 to 128 kbps/channel.
The native bitstream format of Vorbis is libogg (Ogg). Alternatively,
libmatroska (matroska) can also be used. [.sheep27 SUSE Linux Enterprise 15 SUSE LLC BSD-3-Clause https://www.suse.com/ System/Libraries http://www.vorbis.com/ linux x86_64 [#[# 3838632897abd24984e640bf70fe0be912cbdd8eb56ac54ce4552a0adc7bac63 libvorbisfile.so.3.3.7 root root root root libvorbis-1.3.6-4.3.1.src.rpm libvorbisfile.so.3()(64bit) libvorbisfile3 libvorbisfile3(x86-64) @ @ @ @ @ @
/sbin/ldconfig /sbin/ldconfig libc.so.6()(64bit) libc.so.6(GLIBC_2.14)(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.4)(64bit) libogg.so.0()(64bit) libvorbis.so.0()(64bit) rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 [{@ZZ@ZZZ8@X=mTSS Qm=@Q1O@OC@N@Nσ@NˎN[@M@M@Ls@Ls@K
@K(J@JhPJ?r@tiwai@suse.de tiwai@suse.de tiwai@suse.de tiwai@suse.de tiwai@suse.de tiwai@suse.de aloisio@gmx.com mpluskal@suse.com fcrozat@suse.com andreas.stieger@gmx.de mmeister@suse.com seife+obs@b1-systems.com ftake@geeko.jp tiwai@suse.de idonmez@suse.com crrodriguez@opensuse.org coolo@suse.com crrodriguez@opensuse.org dmueller@suse.de davejplater@gmail.com coolo@novell.com reddwarf@opensuse.org tiwai@suse.de jengelh@medozas.de tiwai@suse.de tiwai@suse.de coolo@novell.com - Replace vorbis-CVE-2017-14160.patch with the upstream fix
(commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
(CVE-2018-10392, bsc#1091070):
vorbis-CVE-2018-10392.patch - Fix out-of-bounds access inside bark_noise_hybridmp function
(CVE-2017-14160, bsc#1059812):
downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
(CVE-2018-10393, bsc#1091072):
downstream fix: vorbis-CVE-2018-10393.patch - Split libvorbis-doc subpackage to a separate spec file for
reducing the dependencies - Update to version 1.3.6:
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.
* Appveyor support
* Travis CI support
* Add secondary CMake build system.
* Build system fixes
- Build documents with doxygen, and many tex stuff;
this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
vorbis-fix-linking.patch
0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
libvorbis-CVE-2018-5146.patch - Fix VUL-0: libvorbis: Out of bounds memory write while processing
Vorbis audio data (CVE-2018-5146, bsc#1085687):
libvorbis-CVE-2018-5146.patch - Fix VUL-0: out-of-bounds array read vulnerability exists in
function mapping0_forward() (CVE-2017-14633, bsc#1059811):
0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
memory in function vorbis_analysis_headerout(CVE-2017-14632,
bsc#1059809):
0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch - Added 32bit libvorbis-devel in baselibs.conf - Cleanup spec file with spec-cleaner
- Update to 1.3.5
* Tolerate single-entry codebooks.
* Fix decoder crash with invalid input.
* Fix encoder crash with non-positive sample rates.
* Fix issues in vorbisfile's seek bisection code.
* Spec errata.
* Reject multiple headers of the same type.
* Various build fixes and code cleanup. - Fix obsoletes and provides in baselibs.conf. - Xiph libvorbis 1.3.4
* reduced static data size in libvorbisenc
* associated minor changes required to libvorbis and libvorbisfile
* minor build fixes and build system updates
* no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes - Added url as source.
Please see http://en.opensuse.org/SourceUrls - fix build with automake-1.13.1 - updated to 1.3.3
* vorbis: additional proofing against invalid/malicious
streams in decode (see SVN for details).
* vorbis: fix a memory leak in vorbis_commentheader_out().
* updates, corrections and clarifications in the Vorbis I
specification document
* build warning fixes - VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
(bnc#747912) - -O20 optimization level doesn't exist, use -O3 - open files with O_CLOEXEC, in order to avoid fd leaks
when calling applications fork() ..execve()...
This patch does not cover the executable tools since
it is not critical for them. - add libtool as buildrequire to avoid implicit dependency - Fix build with no-add-needed - fix provides/obsoletes in baselibs - Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services. - fix the package split - updated to version 1.3.2
* vorbis: additional proofing against invalid/malicious
streams in floor, residue, and bos/eos packet trimming
code (see SVN for details).
* vorbis: Added programming documentation tree for the
low-level calls
* vorbisfile: Correct handling of serial numbers array
element [0] on non-seekable streams
* vorbisenc: Back out an [old] AoTuV HF weighting that was
first enabled in 1.3.0; there are a few samples where I
really don't like the effect it causes.
* vorbis: return correct timestamp for granule positions
with high bit set.
* vorbisfile: the [undocumented] half-rate decode api made no
attempt to keep the pcm offset tracking consistent in seeks.
Fix and add a testing mode to seeking_example.c to torture
test seeking in halfrate mode. Also remove requirement that
halfrate mode only work with seekable files.
* vorbisfile: Fix a chaining bug in raw_seeks where seeking
out of the current link would fail due to not
reinitializing the decode machinery.
* vorbisfile: improve seeking strategy. Reduces the
necessary number of seek callbacks in an open or seek
operation by well over 2/3.
- updated to version 1.3.1
* tweak + minor arithmetic fix in floor1 fit
* revert noise norm to conservative 1.2.3 behavior pending
more listening testing
- updated to versio 1.3.0
* Optimized surround support for 5.1 encoding at 44.1/48kHz
* Added encoder control call to disable channel coupling
* Correct an overflow bug in very low-bitrate encoding on 32 bit
machines that caused inflated bitrates
* Numerous API hardening, leak and build fixes
* Correct bug in 22kHz compand setup that could cause a crash
* Correct bug in 16kHz codebooks that could cause unstable pure
tones at high bitrates
- run spec-cleaner
- removed libvorbis-automake-fix.diff, libvorbis-doc-fixes.diff,
libvorbis-r16326-CVE-2009-3379.diff and
libvorbis-r16597-CVE-2009-3379.diff (upstream fixed)
- follow library packaging policy
- run make check - VUL-0: libvorbis: memory corruption while parsing ogg files
(bnc#608192, CVE-2009-3379) - add baselibs.conf as a source
- enable parallel building
- package documentation as noarch - updated to version 1.2.3:
* correct a vorbisfile bug that prevented proper playback of
Vorbis files where all audio in a logical stream is in a
single page
* Additional decode setup hardening against malicious streams
* Add 'OV_EXCLUDE_STATIC_CALLBACKS' define for developers who
wish to avoid avoid unused symbol warnings from the static
callbacks defined in vorbisfile.h
- updated to version 1.2.2:
* define VENDOR and ENCODER strings
* seek correctly in files bigger than 2 GB (Windows)
* fix regression from CVE-2008-1420; 1.0b1 files work again
* mark all tables as constant to reduce memory occupation
* additional decoder hardening against malicious streams
* substantially reduce amount of seeking performed by Vorbisfile
* Multichannel decode bugfix
* build system updates
* minor specification clarifications/fixes
- dropped aotuv patch temporarily - updated to aoTuV patch version beta5.7:
* including security fixes
* improved encoding speed of low bitrate mode
* reduced distrotion by clipping at low sampling frequency
* fixed noise control part of impulse block
* tuning of each part was redone
* expanded noise control of the impulse block
* fixed pre-echo reduction code
* noise normalization reviewed
* detailed tuning done again - fix build with automake 1.11 /sbin/ldconfig /sbin/ldconfig sheep27 1528204334 1.3.6-4.3.1 1.3.6-4.3.1 libvorbisfile.so.3 libvorbisfile.so.3.3.7 /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:7657/SUSE_SLE-15_Update/1ba9f2f4029dd470cea8d32384527542-libvorbis.SUSE_SLE-15_Update cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=bb169c024198419e76b697b02051209d348e3041, stripped P R R R R R R ܙ> ~ utf-8 76917b6ea471b8ceee9e59d4edb71a51efe9a7fa54f7c4e688d588029bebafa5 ? 7zXZ
! t/4]
cr$x#I{9hK")řwV
E
$'ͪCd quM. A`~lF;+J{/ E@ %~R ׀ nkbGY\6p*?u HS
iO0wK S9Hhz՜H.
*ėNuLH-aj")OKگB1)">Nߎiɶb 8(EQ55 ߧ=x/r[U#V1\,PrrF'ǵknod` l@L P \ tcfUO5r)Aȑձw`3 w
|D Hi R"T EK}]7d+ L ;F[tts:r;tUBJB+ AϾ}FcܛitBC$8t֡Dیa leI̜m;%-".SO Rj=lOsD~
_|rUH76ƏXUirҸCB#"8i15n{8R, y'R͜ΔWo a,/S P?.? 먱/aua7 W3DA
6fߣr?5j#O`p /'M/*}8̶= |̇һE0aţJ*$ U v} >i|<98D.2HKPn
%ͥF=X c4m@ *f}ȓMcfWgm7juJvdrAEcM3lBn!t A9y/b+m[~WV?q\c[J_0"4DL+ j %):D^yO`Z; '\MN&.25X4o1&iB\/5 K }p"O x_! Ҿ,Gv|E҈}-Juw2 3}e'@7*=@ KY^X 7T 6b+D
U@8W$T"KV| Y V̌ pǪ3NHԀ6Yo NOG r,VM 3G?/(w4CN G-7(zɯ=M$!@)ª{&Fݕl:;Lҳgiy~z]o; *e'(g8nl'|dԓCs yHr7ڐrd8q$lg8-jNAJ|1gN@xY Px2ztAdY<E,~ :ddqUY9FdDtʛ A}0K ;v BY%%}.|s=2rYFqN &2
}}ޏd]tqW =qs uj
{
Įᮗl'¡EWfGQB~e+`+s^
wr.SUo_rLƃq] v gտ\akϞ`>SS4 }'fwbsOgT|cu:pv/`mͤPH8!}vװTJoP?XIN*I}w£>寎Q:>K~xѫ]ɭ3Y`T4| F(X~ĻtꌇzpP]$B/cim_Zr> 6j9pZ!~6{6I[B#<7@O` $`/McY` &zv /~z $?#>z],Aۧ* NxJS ݝ-j2|=K b +2t7K\Dք/i ܵf )m㉟ $Sn)]b{UGr
UIgB٥&wgCǜpg"AԹ~#AEz,f2/k~pAU㳮vN舎9'-lQJ X7#6#Q_߅wة]'"oJλ853N L$Hs
m6lwp8urԟZT&k/mۅ P =C*
Brা%Su
d^W2}H /%W,͂_gpU½T%=CF"~쵗fgk
pf&9B xѩQ}j0X HA Um|0e?RG1 d aβ9t 65:wLOrE@ {ȵӬxyUDK+St|6"wktu/*ǎ3^LbT \qJĶl]0A`{9b w&z% . Y6 UY>4syI+$.40J!r9ɫprsSQ~8+x5Έ w0 ZʵP3e~6K˧_
=}]I(.VT{a %%Q+M!%Vb߿0.H+&pAG45cL [Aε>7s@ InՌMf29+#] P%S9f'1 M
w1 B[ckicε*4|h ;"$J0٣ \;)p%*H{>p+Q;@ 6x 6-):℺`|{f
-}-W*/!PM&`)?uv R U9 w
/u>( 9s=i_U-DXͷpn Eni`<876BrD*Ɂ^| >b;=@2<7ϝ<玫.!ī8M! Om I $Қd yN6i 29u=䷺xn.R Ei@,=,>Г-wUex
Vhܐ,fбG6b{cV~`o` ;U~
w͈Skp̗ta)F)tVy0V1Ăh#B<: tA
ȽtC4r:vic b*)bƃpBT }Jlo~/VJ+Kk»K)T:N"`ʙ$V {jcTh{R^stL(Z| oM s 0R/2zH=@:zK\a +V76u-X`Jfgc a? p]> .A%4VևYHBD4+9H ɶʯnD ,cIYOgjد+<-ĹIwrJAw8tȭ̈u 6O:Wk,YgBCRj\r[Y!ǘ)#<DZ IB_k'A՞qoaI\DѵzǜL -r+Cb 4pv}^qLmQd \yE {l3BV)l,C8M[邪; ; A %ܼFDP[1e>xC]îUGhO7j
uB
{cU7a5yE3{ -ZtjSN6,Df :J^thYܿvͷ,u«ZNN]<
G\Pծq.Tƫ=$2=A 25S<)\ e.x%Ƿ7[WvG'A[(Y2 r͓T)G!&mH~EVPK&Į?a Ñu6##qyg?/b
kN #N7[iw@J"Iv ~P0 1~)>a
GVU Z2+Gph?) !CΔ&:9S~}z8db6̪^uv*-j:ўUS9R[$=U"ݍ0
&|ugGռ7%D.e-HI UƲ7 gp NHCծHa )L>D?%r-Q Ls}>P"Txwp5o.rA__N6kwoM5T _6lHrevEb=֭q]@v0T8vPι,C 1eagWco- k [kt°GY۲%Oz
j uiDЍzy1^
$P#aZYӤ= TTo~j89QFu_wg'd1gsv`
J}` t$
1E\{~s conitd.`0IV t;4.A߰<~[A# .8Fˈsm |S'cZ* ģ-t0[Тu~a"k~4;ŐtB}wV*VtGLn&W@ Х)52 cHk %Бմ;ӼPc"³SyU!*Ymlh(&+`,/s2_ěQUNx}( 4 b;>4_ H%Ǥnu'1 Xs9 o[ (ܳ=@V=rE;DI٪]b)fSl,Nλi"< /-,RM2A,YLxsG,_[ĕ_;1c̰Y qJpTd{׳H5FI:^% kٙUT _TCI\=gO4ߖ ) 4Kzw/h.2w
r _,Tg"M`3 ^E:G+'ʣV+&<0r ,[Tt5VxJ'R(*hwj֥1[N]6\ `\Y$xkD=[U-`SjB _ $'=iQsL>ifuDZw=Ff[o <^ q>|b\ҁ.4Mb?!p WR\; 8x &e-Zj$I7rWW!kA0[2sp`kԸ8DkUiXF["hje4˽0oDS#(%_Ey^v}R.o/z}(rh>L7ĝE 9
օ: 1.ճD/K/<\bRh=O烙B!g7]eavq g?ߪæ_$6=SXW p}TzNIZF`)>]FYOO?jh=*!pb
}p 4{ҝnF0eY08<oo?jvy={ ЕX("rZ`L^Zt1!Ɍ:o].@?{ró5
=o)E)n~0\v3ޔLs1H')1RL1:דDZT`آPp%fW4 V2~FTGr/5|Zww@K#qeICp=JUFW0hdfd?5 yƥ$5)` GE7:%#xqmz*sm/MR֏4 k 3OQFI{t]1xG OM[^F G;\ gSa=`H:; ͔2smhl4P: :Ք>A ?-fCAI
?Y^h5%c} 8{䝟
V86v]ʻFLjٗ鄐 M˘{RW%S:uhU >}h-I4C@s١ڞ%\[Ex4˩l B֫PXk`
#?/T1pyZMOajM2iϤ- 3t~2#Pb@+P
b,,b!ӑځ!uP] MFV e@g
]K knėxQ p 0@眪>EO+ѥ>ǨR ]{-O0x4 >=@BbhxC/\Nٴl d<,]51pl^0r;
,adx
V% @ڛ$$J |LlG亦F:
s{. xiD&k CuTO8~/`RU{a/px DNK$*'mKО+6GL^qCz$zj ,W29 2M
l`~
"-K<_RpA^
%87z?ߘ$ S+2;6P>Fo A&*(XN>>^_p@ة Gp|'4 p7ȮW|c:9
nIבh LP2,%K!a2gLy~-]
{$hOH
gL 8Sx{18ib$!&2^Y =;1DĄ^4a2,s( *uMM4NotE,hsd!I"'x6)~J9r`L$n6Вc>ozT{
Y-F슓|]_wᆮ^ZP*tߜl3Ʉ1ݜsoZ$9 9dYLh(C6 !.]nfF㒕G Lmt$`;rG"H=՝c r'EV' M@䮿9.ׁ
4(U~
n$k7V c|%qαͫ7, pY[ ߗN G5fs|ܙ] N~.n=K[c-5K۩'cYQJa/IrCiA3Q;5!
B};,d%MfsY{!^[k_L3K#$ =m ""ݏz!H8q0 +CvAFSwƇ[`h
2+ߐX^J ':QDltG:!
2*vtB 7ûG Ѭs,v:ES fϿ2L c4ߩ1G?'%pk&:_ZIhcv})Ԑ,|gDO&4 kwiD__-ʫs$B2 +G 8Pj&73\]e,kϖ)3X9~
tW
2Lnոaz o*8j5wki0#L&=:l hh_ | \f\LnM0D0|R$
-o K]v?O=|UWC. !5⫤ϸL Wm ѠhP) >|ćA]#d{Y}p@IkIا # J_!%QNʐFGy+p^rѴ4)lCLSu$ာVl KO&^6t*qV3ch )C2F XGL1]&[G6Ԃ@|qy=2tes}e1i<<`Em
<\ǑZCq(+~_cHړ-=i+?i 0K#Hгy-Fcg
% ]Y+s}9]x#a=(їٸk|g[*V#CBgXtþ ( )(/J-4o!i :X :xHHRR`YqeWVvя3um .#tʟ
&/Ƈ)ܝ aNw#tU AkfڛB?eܐsC|%bhY
]^*~}W ,39kD.@
9eWWpuf
Mwz!fD')ď:SIS]J@nMĭW
9ڱ:|x ʄ|-L2>c:W|#UIwdil5sH]{˒"z W PsZ7_ [9 Vq f:;\6!g*f@>~[Vevo4M^!S9B5L~zqg¤h
uJIj߅I
:8d:'U ?܊j!@`EtICgJx= aWà jL!"kl(ڈnOoWA 4")Uqa}t{(SⓊT=l5.FH~C'KXʖ
qQ>T073\cZϦw}0
,٪#=.:Y]E
a)~3 a( lC&-0Au1Ǜ 9?0R=xYTIpig+KQr[ )
(5ݢ Bp#-1Ҕܔ4XKvg:k(լf֖1,:> ;
-ian irut:Gy}ClSz6P
KWbeIaV@Vݻz ݍn/Zewfe>xٱ1 Kavi' }0X"rXW|oST sa G^_?ze] Q v" @a;Z);pe9"?!
A\%c9 ֳdb1a|9ZvNx 8Vǫձ2
-^AtU90$fٓKfWBm}&ֺ9.`q|tjZ!߃F:]E";Zba/ γyY
n{BfkD%huؒWNv]6Aۨ0la0xt|bX]8l0(H$T]ɘ&1XĮVRR_nDqId@Pc=7ߌM"5
?2Jǥiu
71D
mq%>M<V,5m4 PC':\!(K
#l z߫"@4' 6<q}%JԽӈwoAe0MOmc4>ʺGmGDD+@54Bhb Ѫ lTPh?>%ٱY%Xpy j K\Q/
YZ