./audio/libvorbis [audio compression codec library]
[+] Add this package to your ports tracker

[ CVSweb ] [ Homepage ] [ RSS feed ]

Version: 1.3.7, Package name: libvorbis-1.3.7
Maintained by: Christian Weisgerber
Master sites:
Description
Vorbis is a general purpose audio and music encoding format
contemporary to MPEG-4's AAC and TwinVQ, the next generation beyond
MPEG audio layer 3. Unlike the MPEG sponsored formats (and other
proprietary formats such as RealAudio G2 and Windows' flavor of the
month), the Vorbis CODEC specification belongs to the public domain.
All the technical details are published and documented, and any
software entity may make full use of the format without royalty or
patent concerns.

This package contains:

- libvorbis, a BSD-license software implementation of the Vorbis
specification by the Xiphophorus company.

- libvorbisfile, a BSD-license convenience library built on Vorbis
designed to simplify common uses.

- libvorbisenc, a BSD-license library that provides a simple,
programmatic encoding setup interface.

Filesize: 1175.578 KB
Version History (View Complete History)
  • (2020-07-05) Updated to version: libvorbis-1.3.7
  • (2018-03-17) Updated to version: libvorbis-1.3.6
  • (2015-03-15) Updated to version: libvorbis-1.3.5
  • (2014-01-29) Updated to version: libvorbis-1.3.4
  • (2012-02-18) Updated to version: libvorbis-1.3.3
  • (2010-11-25) Updated to version: libvorbis-1.3.2
  • (2010-06-03) Updated to version: libvorbis-1.3.1
  • (2009-11-25) Updated to version: libvorbis-1.2.3p0
  • (2009-07-14) Updated to version: libvorbis-1.2.3
  • (2009-02-08) Updated to version: libvorbis-1.2.0p1
[show/hide] View available PLISTS (Can be a lot of data)

CVS Commit History:

   2020-07-05 09:45:00 by T.J. Townsend | Files touched by this commit (4)
Log message:
update to libvorbis 1.3.7; with/ok naddy
   2020-06-28 14:05:27 by T.J. Townsend | Files touched by this commit (3)
Log message:
add upstream patches for CVE-2017-14160 and CVE-2018-10392
ok naddy
   2020-06-28 14:03:51 by T.J. Townsend | Files touched by this commit (4)
Log message:
add upstream patches for CVE-2017-14160 and CVE-2018-10392
ok naddy
   2019-07-12 14:44:13 by Stuart Henderson | Files touched by this commit (877)
Log message:
replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes
   2019-05-04 22:31:22 by Anthony J. Bentley | Files touched by this commit (16)
Log message:
Use https for xiph.org master_sites and homepages.
   2018-03-16 15:53:13 by Christian Weisgerber | Files touched by this commit (3)
Log message:
Security update to 1.3.6:
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.
   2018-03-16 15:44:10 by Christian Weisgerber | Files touched by this commit (4)
Log message:
Security update to 1.3.6:
* Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
* Fix CVE-2017-14632 - free() on unitialized data
* Fix CVE-2017-14633 - out-of-bounds read
* Fix bitrate metadata parsing.
* Fix out-of-bounds read in codebook parsing.
* Fix residue vector size in Vorbis I spec.
   2016-03-11 13:11:39 by Christian Weisgerber | Files touched by this commit (15)
Log message:
garbage collect CONFIGURE_SHARED
   2015-03-14 14:56:14 by Christian Weisgerber | Files touched by this commit (8)
Log message:
Update to 1.3.5:
* Tolerate single-entry codebooks.
* Fix decoder crash with invalid input.
* Fix encoder crash with non-positive sample rates.
* Fix issues in vorbisfile's seek bisection code.
* Spec errata.
* Reject multiple headers of the same type.
   2010-11-25 10:00:00 by Christian Weisgerber | Files touched by this commit (4)
Log message:
update to 1.3.2: robustness fixes and documentation updates
   2010-11-14 17:22:54 by Marc Espie | Files touched by this commit (427)
Log message:
convert to new style depends
zap default spec that are not needed
convert libspecs as well
convert p* to REVISION.
No package changes
   2010-10-18 16:43:10 by Stuart Henderson | Files touched by this commit (25)
Log message:
new-style WANTLIB/LIB_DEPENDS
   2010-06-03 09:48:36 by Christian Weisgerber | Files touched by this commit (14)
Log message:
update to 1.3.1; with and ok pea@
   2010-01-02 16:12:35 by William Yodlowsky | Files touched by this commit (3)
Log message:
SECURITY FIX
Resolves:
CVE-2008-1419
CVE-2008-1420
CVE-2008-1423
CVE-2009-2663
CVE-2009-3379
and adds upstream-r14811_huffman_sanity_checks
from ubuntu via naddy@, thanks
help and ok jasper@
   2009-11-24 14:43:14 by Christian Weisgerber | Files touched by this commit (6)
Log message:
SECURITY:
Fix handling of malformed Vorbis streams that would crash libvorbis.
CVE-2008-1420 (improved), CVE-2009-3379.  From xiph.org SVN.
   2009-07-13 09:48:55 by Christian Weisgerber | Files touched by this commit (12)
Log message:
update to 1.2.3: mostly bug fixes
   2009-02-07 09:07:53 by Christian Weisgerber | Files touched by this commit (5)
Log message:
install a few missing docs; from Tim van der Molen
   2008-05-17 13:58:25 by Christian Weisgerber | Files touched by this commit (3)
Log message:
SECURITY fixes from Xiph SVN:
* add code to prevent heap attacks by exploiting dim=bignum and
partition_codewords = partion_values
* correctly handle the nonsensical codebook.dim==0 case
* dd checks/rejection for absurdly huge codebooks
CVE-2008-1419, CVE-2008-1420, CVE-2008-1423
   2007-08-01 00:14:24 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
- backport several security fixes from libvorbis SVN
cf. http://www.isecpartners.com/advisories/2007-003-libvorbis.txt
ok sturm@
   2007-08-01 00:13:58 by Antoine Jacoutot | Files touched by this commit (2)
Log message:
- backport several security fixes from libvorbis SVN
cf. http://www.isecpartners.com/advisories/2007-003-libvorbis.txt
ok sturm@
   2007-07-30 09:29:36 by Christian Weisgerber | Files touched by this commit (9)
Log message:
SECURITY update to 1.2.0.
Fix several vulnerabilities allowing heap overwrite, read violations
and a function pointer overwrite.
From: Moritz Grimm
   2007-04-05 09:38:13 by Marc Espie | Files touched by this commit (1270)
Log message:
base64 distinfo with SHA256
   2006-10-28 04:30:41 by Marc Espie | Files touched by this commit (25)
Log message:
re-format SHARED_LIBS
   2006-08-01 06:13:29 by Marc Espie | Files touched by this commit (40)
Log message:
new-style specs
   2006-07-19 07:41:02 by Steven Mestdagh | Files touched by this commit (18)
Log message:
homepage fixes
   2006-01-10 04:21:21 by Marc Espie | Files touched by this commit (8)
Log message:
zap more MODGNU_SHARED_LIBS
   2005-12-23 08:03:10 by Marc Espie | Files touched by this commit (25)
Log message:
switch a few ports to SHARED_LIBS and USE_LIBTOOL
   2005-12-03 14:15:51 by Christian Weisgerber | Files touched by this commit (6)
Log message:
- maintenance update to 1.1.2
- remove inter-library dependency on libm (bump major)
   2005-10-18 17:24:26 by Christian Weisgerber | Files touched by this commit (10)
Log message:
switch over to USE_LIBTOOL
   2005-07-02 13:38:46 by Christian Weisgerber | Files touched by this commit (9)
Log message:
maintenance update to 1.1.1
   2005-01-30 10:12:03 by Christian Weisgerber | Files touched by this commit (5)
Log message:
- Remove inter-library dependency on libogg.
- Bump libvorbis major version.
- Skip building examples which aren't installed anyway.
   2005-01-05 08:47:10 by Christian Weisgerber | Files touched by this commit (122)
Log message:
SIZE
   2004-11-21 10:51:48 by Marc Espie | Files touched by this commit (79)
Log message:
WANTLIB markers
   2004-09-30 13:39:57 by Christian Weisgerber | Files touched by this commit (9)
Log message:
Update to 1.1.0:
* merges tuning improvements from Aoyumi's aoTuV with fixups
* new managed bitrate (CBR) mode support
* new vorbis_encoder_ctl() interface
* extensive documentation updates
* application/ogg mimetype is now official
* autotools cleanup from Thomas Vander Stichele
* various bugfixes
   2004-08-06 08:37:29 by Marc Espie | Files touched by this commit (75)
Log message:
switch to new style PLISTS, using @lib, ditching DYNLIBDIR.
Replace two INSTALL scripts with @sample.
Reorder plists to match auto-generation, add comments for files that
don't get installed.
   2004-01-25 10:20:19 by Christian Weisgerber | Files touched by this commit (1)
Log message:
remove inter-library dependencies
   2003-12-13 17:52:22 by Christian Weisgerber | Files touched by this commit (25)
Log message:
Update to Ogg Vorbis 1.0.1.
oggenc can now encode from FLAC, ogg123 can also play FLAC and speex files.
   2003-10-08 10:01:45 by Christian Weisgerber | Files touched by this commit (7)
Log message:
polish
   2003-06-07 18:10:06 by Christian Weisgerber | Files touched by this commit (4)
Log message:
update master sites