vorbis 1.3.7 release

--===============5245017944365544556==
Content-Type: multipart/signed; micalg="pgp-sha512";
	protocol="application/pgp-signature"; boundary="=-ItViITqSTO/ZJOrAId4p"


--=-ItViITqSTO/ZJOrAId4p
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I've pleased to announce the release of libvorbis 1.3.7.

The libvorbis package is the reference implementation for the Vorbis
lossy audio codec, the underlying techology of the ogg file format.

This new release fixes a number of issues, including potential crashes.
We recommend all users upgrade.

Source packages are available from the download site and mirrors:

  https://downloads.xiph.org/releases/vorbis/libvorbis-1.3.7.tar.xz
  https://downloads.xiph.org/releases/vorbis/libvorbis-1.3.7.tar.gz
  https://downloads.xiph.org/releases/vorbis/libvorbis-1.3.7.zip

Changes since the previous 1.3.6 release:

- Fix CVE-2018-10393 and CVE-2017-14160 out-of-bounds read
  encoding very low sample rates.
- Fix handling invalid bytes per sample arguments.
- Fix handling invalid channel count arguments.
- Fix invalid free on seek failure.
- Fix negative shift reading blocksize.
- Fix accepting unreasonable float32 values.
- Fix tag comparison depending on locale.
- Fix unnecessarily linking libm.
- Fix memory leak in test_sharedbook.
- Update Visual Studio projects for ogg library filename change.
- Distribute CMake build files with the source package.
- Remove unnecessary configure --target switch.
- Add gitlab CI support.
- Add OSS-Fuzz support.
- Build system and integration updates.

The encoder signature is updated, and now reads:

  Xiph.Org libVorbis I 20200704 (Reducing Environment)

Source package SHA-256 checksums:

b33cc4934322bcbf6efcbacf49e3ca01aadbea4114ec9589d1b1e9d20f72954b  libvo
rbis-1.3.7.tar.xz
0e982409a9c3fc82ee06e08205b1355e5c6aa4c36bca58146ef399621b0ce5ab  libvo
rbis-1.3.7.tar.gz
57c8bc92d2741934b8dc939af49c2639edc44b8879cba2ec14ad3189e2814582  libvo
rbis-1.3.7.zip

Thanks to everyone who contributed!

Ralph Giles
Xiph.Org Foundation for Open Multimedia

--=-ItViITqSTO/ZJOrAId4p
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
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=qXaM
-----END PGP SIGNATURE-----

--=-ItViITqSTO/ZJOrAId4p--


--===============5245017944365544556==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KVm9yYmlzIG1h
aWxpbmcgbGlzdApWb3JiaXNAeGlwaC5vcmcKaHR0cDovL2xpc3RzLnhpcGgub3JnL21haWxtYW4v
bGlzdGluZm8vdm9yYmlzCg==

--===============5245017944365544556==--