Changelog for libvorbis-32bit-1.2.0-83.6.1.x86_64.rpm :
Fri Mar 2 13:00:00 2012 lijewski.stefanAATTzabka.pl
- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
(bnc#747912)

Wed May 26 14:00:00 2010 tiwaiAATTsuse.de
- VUL-0: ibvorbis: memory corruption while parsing ogg files
(bnc#608192, CVE-2009-2663, CVE-2009-3379)

Thu Jul 23 14:00:00 2009 tiwaiAATTsuse.de
- updated to aoTuV patch version beta5.7:

* including security fixes

* improved encoding speed of low bitrate mode

* reduced distrotion by clipping at low sampling frequency

* fixed noise control part of impulse block

* tuning of each part was redone

* expanded noise control of the impulse block

* fixed pre-echo reduction code

* noise normalization reviewed

* detailed tuning done again

Mon Jun 22 14:00:00 2009 cooloAATTnovell.com
- fix build with automake 1.11

Wed Jan 7 13:00:00 2009 olhAATTsuse.de
- obsolete old -XXbit packages (bnc#437293)

Thu Nov 20 13:00:00 2008 pthAATTsuse.de
- Fix the test in libvorbis-m4.dif and adapt libvorbis-lib64.dif.

Wed May 14 14:00:00 2008 tiwaiAATTsuse.de
- VUL-0: Multiple vulnerabilities in libogg and libvorbis
(bnc#372246)

* CVE-2008-1419 vorbis: zero-dim codebooks can cause crash,
infinite loop or heap overflow

* CVE-2008-1420 vorbis: integer overflow in partvals computation

* CVE-2008-1423 vorbis: integer oveflow caused by huge codebooks

Mon Apr 28 14:00:00 2008 tiwaiAATTsuse.de
- fixed dependency in
*.pc files (bnc#384153)
- removed old run_ldconfig

Thu Apr 10 14:00:00 2008 roAATTsuse.de
- added baselibs.conf file to build xxbit packages
for multilib support

Thu Aug 2 14:00:00 2007 tiwaiAATTsuse.de
- updated to version 1.2.0:

* new ov_fopen() convenience call that avoids the common
stdio conflicts with ov_open() and MSVC runtimes.

* libvorbisfile now handles multiplexed streams

* improve robustness to corrupt input streams

* fix a minor encoder bug

* updated RTP draft

* build system updates

* minor corrections to the specification

Fri Jul 27 14:00:00 2007 tiwaiAATTsuse.de
- fix the documentation link (#293784)
- split documentation to doc subpackage
- remove -fno-strict-aliasing gcc option

Mon Jul 9 14:00:00 2007 tiwaiAATTsuse.de
- fix array boundary conditional flaw in mapping (#287124,
CVE-2007-3106)

Mon Apr 23 14:00:00 2007 tiwaiAATTsuse.de
- use aoTuV beta5 patch:

* The action of noise normalization has been improved.

* The threshold of a stereo mode change was calculated
dynamically.

* Noise control of an impulse block was changed (quality 0-10
/ 32-48kHz). And pre-echo decreased slightly.

* Tuning of each part was redone according to above-mentioned
changed part and additional part.

Mon Apr 16 14:00:00 2007 tiwaiAATTsuse.de
- follow library packaging policy

* move docs to devel package

* remove static library
- remove obsolete m4 files