Changelog for libvorbis0-1.3.3-46.1.x86_64.rpm :
Tue Apr 16 14:00:00 2013
- Added url as source.
Please see

Sat Mar 2 13:00:00 2013
- fix build with automake-1.13.1

Wed Jun 20 14:00:00 2012
- updated to 1.3.3

* vorbis: additional proofing against invalid/malicious
streams in decode (see SVN for details).

* vorbis: fix a memory leak in vorbis_commentheader_out().

* updates, corrections and clarifications in the Vorbis I
specification document

* build warning fixes

Tue Feb 21 13:00:00 2012
- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow

Sun Dec 25 13:00:00 2011
- -O20 optimization level doesn\'t exist, use -O3

Fri Nov 25 13:00:00 2011
- open files with O_CLOEXEC, in order to avoid fd leaks
when calling applications fork() ..execve()...
This patch does not cover the executable tools since
it is not critical for them.

Tue Nov 22 13:00:00 2011
- add libtool as buildrequire to avoid implicit dependency

Mon Aug 29 14:00:00 2011
- Fix build with no-add-needed

Thu May 5 14:00:00 2011
- fix provides/obsoletes in baselibs

Thu Dec 9 13:00:00 2010
- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.

Wed Dec 8 13:00:00 2010
- fix the package split

Wed Dec 8 13:00:00 2010
- updated to version 1.3.2

* vorbis: additional proofing against invalid/malicious
streams in floor, residue, and bos/eos packet trimming
code (see SVN for details).

* vorbis: Added programming documentation tree for the
low-level calls

* vorbisfile: Correct handling of serial numbers array
element [0] on non-seekable streams

* vorbisenc: Back out an [old] AoTuV HF weighting that was
first enabled in 1.3.0; there are a few samples where I
really don\'t like the effect it causes.

* vorbis: return correct timestamp for granule positions
with high bit set.

* vorbisfile: the [undocumented] half-rate decode api made no
attempt to keep the pcm offset tracking consistent in seeks.
Fix and add a testing mode to seeking_example.c to torture
test seeking in halfrate mode. Also remove requirement that
halfrate mode only work with seekable files.

* vorbisfile: Fix a chaining bug in raw_seeks where seeking
out of the current link would fail due to not
reinitializing the decode machinery.

* vorbisfile: improve seeking strategy. Reduces the
necessary number of seek callbacks in an open or seek
operation by well over 2/3.
- updated to version 1.3.1

* tweak + minor arithmetic fix in floor1 fit

* revert noise norm to conservative 1.2.3 behavior pending
more listening testing
- updated to versio 1.3.0

* Optimized surround support for 5.1 encoding at 44.1/48kHz

* Added encoder control call to disable channel coupling

* Correct an overflow bug in very low-bitrate encoding on 32 bit
machines that caused inflated bitrates

* Numerous API hardening, leak and build fixes

* Correct bug in 22kHz compand setup that could cause a crash

* Correct bug in 16kHz codebooks that could cause unstable pure
tones at high bitrates
- run spec-cleaner
- removed libvorbis-automake-fix.diff, libvorbis-doc-fixes.diff,
libvorbis-r16326-CVE-2009-3379.diff and
libvorbis-r16597-CVE-2009-3379.diff (upstream fixed)
- follow library packaging policy
- run make check

Wed May 26 14:00:00 2010
- VUL-0: libvorbis: memory corruption while parsing ogg files
(bnc#608192, CVE-2009-3379)

Wed Dec 16 13:00:00 2009
- add baselibs.conf as a source
- enable parallel building
- package documentation as noarch

Wed Nov 11 13:00:00 2009
- updated to version 1.2.3:

* correct a vorbisfile bug that prevented proper playback of
Vorbis files where all audio in a logical stream is in a
single page

* Additional decode setup hardening against malicious streams

* Add \'OV_EXCLUDE_STATIC_CALLBACKS\' define for developers who
wish to avoid avoid unused symbol warnings from the static
callbacks defined in vorbisfile.h
- updated to version 1.2.2:

* define VENDOR and ENCODER strings

* seek correctly in files bigger than 2 GB (Windows)

* fix regression from CVE-2008-1420; 1.0b1 files work again

* mark all tables as constant to reduce memory occupation

* additional decoder hardening against malicious streams

* substantially reduce amount of seeking performed by Vorbisfile

* Multichannel decode bugfix

* build system updates

* minor specification clarifications/fixes
- dropped aotuv patch temporarily

Thu Jul 23 14:00:00 2009
- updated to aoTuV patch version beta5.7:

* including security fixes

* improved encoding speed of low bitrate mode

* reduced distrotion by clipping at low sampling frequency

* fixed noise control part of impulse block

* tuning of each part was redone

* expanded noise control of the impulse block

* fixed pre-echo reduction code

* noise normalization reviewed

* detailed tuning done again

Mon Jun 22 14:00:00 2009
- fix build with automake 1.11

Wed Jan 7 13:00:00 2009
- obsolete old -XXbit packages (bnc#437293)

Thu Nov 20 13:00:00 2008
- Fix the test in libvorbis-m4.dif and adapt libvorbis-lib64.dif.

Wed May 14 14:00:00 2008
- VUL-0: Multiple vulnerabilities in libogg and libvorbis

* CVE-2008-1419 vorbis: zero-dim codebooks can cause crash,
infinite loop or heap overflow

* CVE-2008-1420 vorbis: integer overflow in partvals computation

* CVE-2008-1423 vorbis: integer oveflow caused by huge codebooks

Mon Apr 28 14:00:00 2008
- fixed dependency in
*.pc files (bnc#384153)
- removed old run_ldconfig

Thu Apr 10 14:00:00 2008
- added baselibs.conf file to build xxbit packages
for multilib support

Thu Aug 2 14:00:00 2007
- updated to version 1.2.0:

* new ov_fopen() convenience call that avoids the common
stdio conflicts with ov_open() and MSVC runtimes.

* libvorbisfile now handles multiplexed streams

* improve robustness to corrupt input streams

* fix a minor encoder bug

* updated RTP draft

* build system updates

* minor corrections to the specification

Fri Jul 27 14:00:00 2007
- fix the documentation link (#293784)
- split documentation to doc subpackage
- remove -fno-strict-aliasing gcc option

Mon Jul 9 14:00:00 2007
- fix array boundary conditional flaw in mapping (#287124,

Mon Apr 23 14:00:00 2007
- use aoTuV beta5 patch:

* The action of noise normalization has been improved.

* The threshold of a stereo mode change was calculated

* Noise control of an impulse block was changed (quality 0-10
/ 32-48kHz). And pre-echo decreased slightly.

* Tuning of each part was redone according to above-mentioned
changed part and additional part.

Mon Apr 16 14:00:00 2007
- follow library packaging policy

* move docs to devel package

* remove static library
- remove obsolete m4 files