Gentoo Linux Security Advisory GLSA 200709-06 - A possible buffer overflow vulnerability has been reported in the local__vcentry_parse_value() function in vorbiscomment.c. Versions less than 0.0.11 are affected.
9e6af0403420a5e2f5ae83576528313bc511a3e3bf9ea3feac396df8bd99100c