libvorbis0-1.3.3-17.1<>,`[>/=„X[B``|0IqGp1s9V .S%!~g!K=EOatE ¥.گ8>|іHɉfZoQWL1`9Dl$K6e4/9BGz!-,i9OEdjg,>v^͸kZ` U_wky>C?;ḷ.// qeS mY+a$!leVA8E,B7q0>?<?,d   Ctx      : PXbl d(89:c>4@CBRF\GtH|IXYZ[\]^bcd.e3f8l:uLvTwxy zClibvorbis01.3.317.1The Vorbis General Audio Compression CodecVorbis is a fully open, nonproprietary, patent-and-royalty-free, and general-purpose compressed audio format for audio and music at fixed and variable bit rates from 16 to 128 kbps/channel. The native bitstream format of Vorbis is libogg (Ogg). Alternatively, libmatroska (matroska) can also be used.[>wildcard3`openSUSE Leap 42.3openSUSEBSD-3-Clausehttp://bugs.opensuse.orgSystem/Librarieshttp://www.vorbis.com/linuxx86_64`[4[504c3eb1d7cb2471f2f2db14fe56cdcbflibvorbis.so.0.4.6rootrootrootrootlibvorbis-1.3.3-17.1.src.rpmlibvorbislibvorbis.so.0()(64bit)libvorbis0libvorbis0(x86-64)@@@@@@@@@   /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.4)(64bit)libm.so.6()(64bit)libm.so.6(GLIBC_2.15)(64bit)libm.so.6(GLIBC_2.2.5)(64bit)libogg.so.0()(64bit)rpmlib(CompressedFileNames)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsLzma)3.0.4-14.0-14.4.6-14.11.2[{@ZZZ8@SQm=@Q1O@OC@N@Nσ@NˎN[@M‘@M@Ls@Ls@K @K(J@JhPJ?r@tiwai@suse.detiwai@suse.detiwai@suse.detiwai@suse.defcrozat@suse.commmeister@suse.comseife+obs@b1-systems.comftake@geeko.jptiwai@suse.deidonmez@suse.comcrrodriguez@opensuse.orgcoolo@suse.comcrrodriguez@opensuse.orgdmueller@suse.dedavejplater@gmail.comcoolo@novell.comreddwarf@opensuse.orgtiwai@suse.dejengelh@medozas.detiwai@suse.detiwai@suse.decoolo@novell.com- Replace vorbis-CVE-2017-14160.patch with the upstream fix (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch - Fix the validation of channels in mapping0_forward() (CVE-2018-10392, bsc#1091070): vorbis-CVE-2018-10392.patch- Fix out-of-bounds access inside bark_noise_hybridmp function (CVE-2017-14160, bsc#1059812): downstream fix: vorbis-CVE-2017-14160.patch - Fix stack-basedbuffer over-read in bark_noise_hybridm (CVE-2018-10393, bsc#1091072): downstream fix: vorbis-CVE-2018-10393.patch- Fix VUL-0: libvorbis: Out of bounds memory write while processing Vorbis audio data (CVE-2018-5146, bsc#1085687): libvorbis-CVE-2018-5146.patch- Fix VUL-0: out-of-bounds array read vulnerability exists in function mapping0_forward() (CVE-2017-14633, bsc#1059811): 0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch - Fix VUL-0: Remote Code Execution upon freeing uninitialized memory in function vorbis_analysis_headerout(CVE-2017-14632, bsc#1059809): 0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch- Fix obsoletes and provides in baselibs.conf.- Added url as source. Please see http://en.opensuse.org/SourceUrls- fix build with automake-1.13.1- updated to 1.3.3 * vorbis: additional proofing against invalid/malicious streams in decode (see SVN for details). * vorbis: fix a memory leak in vorbis_commentheader_out(). * updates, corrections and clarifications in the Vorbis I specification document * build warning fixes- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow (bnc#747912)- -O20 optimization level doesn't exist, use -O3- open files with O_CLOEXEC, in order to avoid fd leaks when calling applications fork() ..execve()... This patch does not cover the executable tools since it is not critical for them.- add libtool as buildrequire to avoid implicit dependency- Fix build with no-add-needed- fix provides/obsoletes in baselibs- Split libvorbisenc2 and libvorbisfile3 from libvorbis0 - Removed services.- fix the package split- updated to version 1.3.2 * vorbis: additional proofing against invalid/malicious streams in floor, residue, and bos/eos packet trimming code (see SVN for details). * vorbis: Added programming documentation tree for the low-level calls * vorbisfile: Correct handling of serial numbers array element [0] on non-seekable streams * vorbisenc: Back out an [old] AoTuV HF weighting that was first enabled in 1.3.0; there are a few samples where I really don't like the effect it causes. * vorbis: return correct timestamp for granule positions with high bit set. * vorbisfile: the [undocumented] half-rate decode api made no attempt to keep the pcm offset tracking consistent in seeks. Fix and add a testing mode to seeking_example.c to torture test seeking in halfrate mode. Also remove requirement that halfrate mode only work with seekable files. * vorbisfile: Fix a chaining bug in raw_seeks where seeking out of the current link would fail due to not reinitializing the decode machinery. * vorbisfile: improve seeking strategy. Reduces the necessary number of seek callbacks in an open or seek operation by well over 2/3. - updated to version 1.3.1 * tweak + minor arithmetic fix in floor1 fit * revert noise norm to conservative 1.2.3 behavior pending more listening testing - updated to versio 1.3.0 * Optimized surround support for 5.1 encoding at 44.1/48kHz * Added encoder control call to disable channel coupling * Correct an overflow bug in very low-bitrate encoding on 32 bit machines that caused inflated bitrates * Numerous API hardening, leak and build fixes * Correct bug in 22kHz compand setup that could cause a crash * Correct bug in 16kHz codebooks that could cause unstable pure tones at high bitrates - run spec-cleaner - removed libvorbis-automake-fix.diff, libvorbis-doc-fixes.diff, libvorbis-r16326-CVE-2009-3379.diff and libvorbis-r16597-CVE-2009-3379.diff (upstream fixed) - follow library packaging policy - run make check- VUL-0: libvorbis: memory corruption while parsing ogg files (bnc#608192, CVE-2009-3379)- add baselibs.conf as a source - enable parallel building - package documentation as noarch- updated to version 1.2.3: * correct a vorbisfile bug that prevented proper playback of Vorbis files where all audio in a logical stream is in a single page * Additional decode setup hardening against malicious streams * Add 'OV_EXCLUDE_STATIC_CALLBACKS' define for developers who wish to avoid avoid unused symbol warnings from the static callbacks defined in vorbisfile.h - updated to version 1.2.2: * define VENDOR and ENCODER strings * seek correctly in files bigger than 2 GB (Windows) * fix regression from CVE-2008-1420; 1.0b1 files work again * mark all tables as constant to reduce memory occupation * additional decoder hardening against malicious streams * substantially reduce amount of seeking performed by Vorbisfile * Multichannel decode bugfix * build system updates * minor specification clarifications/fixes - dropped aotuv patch temporarily- updated to aoTuV patch version beta5.7: * including security fixes * improved encoding speed of low bitrate mode * reduced distrotion by clipping at low sampling frequency * fixed noise control part of impulse block * tuning of each part was redone * expanded noise control of the impulse block * fixed pre-echo reduction code * noise normalization reviewed * detailed tuning done again- fix build with automake 1.11/sbin/ldconfig/sbin/ldconfiglibvorbiswildcard3 15283658861.3.21.3.3-17.11.3.3-17.11.3.2libvorbis.so.0libvorbis.so.0.4.6/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8245/openSUSE_Leap_42.3_Update/e4c881a581d056415581165b0ed9d13e-libvorbis.openSUSE_Leap_42.3_Updatedrpmlzma5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f0dcdf9b06bf4472671e631160164f6b31465f6f, stripped PRR RRRRRR R`2$p?]"k%]dfa?:j^}hjިAt|nI6e`x9_h6t`nUYyjr23$]ȋiRzDDUcǖDJTgPl(8$f-n꿸*oʺ0_ls 9}ƞ^U)TaM]<@e" Y-h1ʌVSl4ZI#%"t5|JnQ\h[kp^G[ 9rD6\N*< >[!ze7lϡ5ٻ"^3z{byΔXr1y9:I w&fY G_{ zQKoV}(Bi2j6ִ8YF*F3+B1]2oUwJ38X 5҇CPZNa%f`F@bwah*ܛ Ⱦޮh]$7D̉$9}$(;4?rh+7'Ѕ| i<-Zf}03+{WJʊOl'bd9gn/'T#zMu%m0Ṭj.XwQo`B [Q@_w?WIN.tqnG[X gq*}m ., 9XȲY07ݺ `RW`Tҷ Ӽ'P'.4#~hMNn>w@;pyN<?Σ7&'j2D> ^==4d-C&Z? sO=8N"WlQ?;+qxmQqá>e#M-*3YqءSPA۹N}{I3-:‡ffMD` /~u 8W%)9> S&SxPb]x$rWiiV-DDcroֺ؆;}G25+K8 a["ld݋EJ!ѭ\I!#30 }:_GRy!|.e |퀋*>ű²mCRCpEہ DL*&@x/[SKt/ѾPKz]ɞQ@X%&%^aݓ䨯l׋VaME,"DF "6* ^RkCqn}E8!qY,hIH.Ӽ+:dsu ?P0'려Qgm1dbH2ԏ@oQ+!*{~,}[/W1b(6%X>Ǹ&+BpZtkK<䦻aG&bͶUzSʎ/eC,$0*-FlI 4xw.If}y dh:P\s|FY-CL0EHr5.A0}=-JP4:4 D5w_ʈԄL؉nh~j{2(RacպDh-9m)25AɁe"x,f4W&B^53%aoG'3_ScGm`Ne%Nƶo 92=!2vނ' 1zP'GI`+OVڞNT3QZB6W[q,w񙒗&l($\Ϙ?I8ח6Im~o,S/Q 6Etj}ϻJ,Yf'5(ۓis;3,6:gJR'=M_ח3T5FEEkL tvBUgqa7ep .ǫoM 07x-XpgviAn9[>1kY3ݨ8ѣ_ _jgS%Se>7;5YF 9$'.W5Y\o4TK2{Ӊw?3fB/޲]~$Ǿݎ& 3+͕P WAЦdaqR芐i~|)<%ɝmH ÄSC#RҠSt;HGcWiar^Eze47;6B3' GT` K{rx=S25p$JB-nABTzk*p[@;ZI;X5knt=w:C~zQ*}B2+ ])BAv\ eO ;ӊ}'!TɊ@ K],ܲZQg <88R[#x_$pS8π"VVa._i] Kj\SFdIQ"pe̚UY$S'( Q [ϩfٮd2T.yR[h`\fZ`|#b3I>2 \zz M' R[$CcO0$Dyjga!uQ"Ww Ő 묆*}ac& pHC\,=si`zڦMQb yJ0msg;5_fbPDs҉"D(7ʿxQ39߻֜+|\bh \]Mۚw|T JbkW=;y`܃6CGَɪT9U,*༌D{hŭ2`Ygb 鍞>zjH^zvre Ԭ"13:Diƫ{GN䶰.|6^`4$- ! PɁjl51|]5[l,89N],ux_P6 ]4}tb5bkc yF 4VlOjmc[ бy-%۬:-jmukrJHq⽂8P EP5⽮Gd:\q 9ÌU}ۊ?Xm}]`ФE^n ny#ExW" i&4[[reeZECc24nj"siʲ>H U8tP{)E[)1)/qHKK9jS -=>4%Y ZQ55T֮V+vwA(.8%E/~+L$<WFN<kcz]m|!mOoZ H9Ns=$HS ScVEʉJȐ !żU̴܀$_ )p'sL[*T_Ȟ7٣ߞOp ō^<N.078N@zA9^x)`h fBey !eJG=e'w%>^?*Kg!\j^ZհS*AGs1&{;h~w>.;mrpߞwdp9E\Eq$O?>IO1YG˂12e1χ1Oh/lm^*d%)_>;3P+8NVXj;n[8Dyt5Eg0BMxBȍ{Mu`ӚVJTjDFw-(ķ@֕ M'=<άޑ;̨'zwW$%2X?G_Jm E,b+/􈡆 -R6<%tj30dtu ,}?$Z8q\)Ѐ{IH|Ŧ8W S 9wFT+sbGo„fVQ,'=rb_0t=WQ9m{}GRq2CowyjV&#L=eDiIޙ{܀%/ݲ!⎵WU몮; wP{7 P!P$Ƭ9IMIQdIc QXp \AEgJͱ4)*Uޗ`W\uDѪ'V).1SꇝTp-BtSK7"r^'͈B'k TvX#'|w.Jx! -Q8ѥ>-K؛۞E .PA$χ*0ѣ/}ud%{-0bvJiڄ4԰m^7frXRl}"yu+ϾUo06;7R8e<,uDc*0fKAaB(R&E+ 10NL mK'gM9F%-_ Gpw̡4UlŜ9"7=h,ٴ@p8hחXɛD5ɓQ5e'ֵWDtܢY$;9]$E)t xp&=6 :È'7(r`ƜV>)humZmPd >X- M!_P".UV8$W:lKYhK>|aԓ_\) AXZ6A4\>VE3se'P'`G;=5y:fn\0aOE@8}-]UVN/}$ pVbРȢS1k̳}<%ʨQ*IpN3YȩaԸ: $ax$'T^fi/U`I?¸_xefBGȒm*,Z L/ye 戞qQn> Y#u^vg0};%C(hQ#ib|"yKɬX 3},X5TR/gC !u%M]YAR`tdiS7Sg5\,d5\O߁)}" ngl0s<]}|Y؉ZPj1i0CZ .U$/hF\֎aJmΊ`VTa }f?# ۯBʲHRJ(99ڬ?rYo|jTx:-JoܓJESl,MTqѕyǷzt,nyRelK9'](6>7`W~n7i[ p<Ӂ5JGnzR^heQ 6]k8k0JYaM 2PCd'm'Xd~}Pү"oC.p݌氹 H([yT?<]Ƕ^ H *Qבڥ֓t˖9A^ޅ%ˑ]pk8׏[ K$C%DuwNOKlp5`@"jȳ27{ h_p-\vcRn.qe{!W`w?t:S1J]9J>i8 11qBOe4xs$F̖z lZru׉R=o 끷ky7눋{Gd>7 ϋD~3>,fdxScQ\0̓0ŋ6-^4@Di#Y5K6ɋ/[N2^*18a=ʹ_#qGfX̵6;f ?P_> ]wt=OSjuf`~:kM0}Rݕ@)+W#5qQڵS${`4YAh A\O W0zeeTOc:} fIjҷU23ei[smFmCBMe/ԟnV\%w+(+4R^ o >dt;HD\ /y4; U{#ƊPOΪàvS@gۢlÅ;U)Xp.!,nZӎFPr*Ď%^?Xr dm3\q ffGH0ys/,4pN<}(gS9z2~דa%?ڙ[kO6Ƃnmv 8W).(^8y )x<0S8|S с0_tV>g'GBcJ(HZ7~bMA9MV31]'!Xjq44i²6S2PO R\zI<̘ƾ !Yu1;E1JB9bo'=wx}n>FSgTVTh?em.[Mʠz$[;}-rщ<tRKԱ؆qb˶2IrWv|o;5•:a>j"]6ף߫+$t1Qfocg9c%* |RF?DlSj>"NjPD@koyƟ~zKe|h,p""VY?G + /dLn0+Vł=<' p"AVYg'"iDSVA8T[-^t{ ̓l4_KDZ/05ؓBIu!҂օHj/Hi at6|`k"y+bכD&8.oȝrHWe3FOUSrjOsжAp@ ['Ӹn`kn +>w#9_Toc'w%5o2Cz놺PfSޜ02[d7a\D@`u~Pbff7Em3_휘 W2BfЧrI(D#|zh(fHa-H@*= sG50H\/ Hn s2ӻk cCyJYҾIg w,RHtT$gO׿6k l#_n; SSil j~RVl4p.$ ei\e0Tx}ީu&4P}`\Ti'E?_XI_MeoTvc-1mb3Zy^w-{oTщ,|WY"9f`z+Q^ Q&T3o}Z.~g.Maxqܻٞ Ѿ%-K8mnj} D nS+ԓ%5Prh|I+I0<7yo txq xQ)l2GPJ3 /4:^<0NW2`Wly MUKqR-#0Vv=\*6z}j_pvn%ൔ3HcRT$wY^KӘ`x<_)dFc*ʭNQw:M/`bdYA`waRc2 {6$Yܪ-ȴo:\1cVKB%_Qv6{B}U/oX3[\.4t76r6+Yrq7SH?]of- ךV,NEBgVc%5p 2⎏F೦h{;cgDg^ki'$}CjT+WTGOj0BeoV'*`[ު2LDhpVe4F@޼8LrR6hGpӵrŊGRK7Y]3{ٱGΆN[ggCv*u G76v1{B|O{&WDQ~@Nra ֕ɏ6P}kpEv:K# 4!6. CoX$3 l@M@v5.$F[w qwIV=uS gUr&:vv)r ^jQ9ܪpڷ<6ӷ*GhF1ڈEr5W]@-҃Rp(4B@?-rIHP{6[L$X=][-3x`'(Ro)`.RO.vs{ ay4/Q1;bjU246Nu:KgrRN&/xQ<;|Q-o)+_Q'3<_"ޓ놳E!ɉLc+1v9Te(cr{sDMʃ/LL^klYu| xVXrr$ n@ =Q+*QnͳQu.iAEQ ,wnl&t%&ewFNCBF )g05ߕ槳 vW|;5;d%=Җ?9fM9< OpVߪ&j'XUE{?>s80r Y+W*6ڷZq`AG{7=xɍZ 4"a©*m\ĠW*Ƭo| 4]%MUy 7~pVNE RHQY Li?LѨ=G$qL\52x2aNZP0@d@+v,q .wib' A]r#۷i塽`|]Hq ^1d!>?DE:hs U.Cs:FiHWޅH(/t (<6d˥- ZPtPwxz}1 ~J}vA`!;)0-]n/J&+?aџΈʿKcaՓf*RƔݎrQp8@tdK~EMz!P. tAlUlGsN}nTROuqZyݐӦL!,Dj$uM%p3*r`ի[9<ܖ{% '* ]6  7s~%drscV39Ȩ9Xcd(16{rgxE9q+XȢ"mIQ~L&Q#gc@w,@]"$ _ ?2RNr9Hi)ɟްDb1<(7:1#Lmg Z+%{1)pˡzUh2:޲]"S ]8N77o%WV [$i^hk gaҸ|0讟PYZsSlcV|*sMbwgCo, }h=g"H4w[*魁hGigJY6K>]%; .z.܌԰peW_/9Fmk*]Bqk?̫VEMHO*Y3W-y.}ZI35|! SA@ lq'cpNEV#Km~$G?93YxBF~>两WOɈg"3`@X[_~r#L'RF| %ߓ@6 vzvZͰ/G2z.J*RNV_A",ڕqBܢC1-k:O##&VfPP,Pƈ[!1# uFk#F#pe8Olmd$.; =b*DžW e[@ȶhHAbhgFc;b<ɚ$!s3;roV R5 e#e RQzKP^ rw% 0o{sP5CQx]VwXY)?H d@%nl;ک"O+ͭRI-:҇,75.v O:%] H?@SmܶKC܁LosRdE J@z]/Z6fqdMcx_ެ~RsOjزsuV>4]&^ 0|*q'?Nɠ?&K8%[b04d-)!<"y)Υç'O~vi%;)nFN4KQёo/d欀-eYl*Ze¼zQvRH'뽮(ՓBN&k :BnjU|a[Nm8}Ae^ ~ै‹Uy2 q#ک:+Z;&40+;Q֯P`|ʖ*AN[9l[&{sx(n#Ei0{@#xc84f? =\FL̰C$O=nh# aNo ~l]m%3|6P5$o6ޙL T~T*Nv je3puxV-q6yp>gc`2b)9|jaCZX{>NL {,zl}M~IFY\zxԐUvoگN,0 :;Et'`8?.-RV*LsD Vb)/xZ gF+V2ms .7ZB@=AEQ g 6QVZMw^"ƀBAp.Y R1r|u[,3Jvzjo!FdI7]uhe)!T p`3D^Ml^,Q%2Ygj#o@$=X aW˪pQ{5ĚY!HX&(䰴{G%辶ڮYUAjĊ%)"Mے`wD1QrRI R9$ H.k c/e#Y_ jأ%FI ܯ OEcU NFZB N3U.@@P/r4^SO 318u (2Fe9t 13w\PP*oFmGafW)uO'P֡ )I`A59o!-=:xeW{ K`W0ɉSJi{hYaSkzǟOkixK!"Կ UR65{jm