Gentoo Linux Security Advisory 202003-36 - Multiple vulnerabilities have been found in libvorbis, the worst of which could result in a Denial of Service condition. Versions less than 1.3.6-r1 are affected.
5ccec66844e570e26e65f39f169a9e36ba4c0bd2a8c3ff8effc4e0dc704b145e
Red Hat Security Advisory 2019-3703-01 - The libvorbis package contains runtime libraries for use in programs that support Ogg Vorbis, a fully open, non-proprietary, patent- and royalty-free, general-purpose compressed format for audio and music at fixed and variable bitrates. Issues addressed include a buffer overflow vulnerability.
da1c2b55b4229942db1fb12ae86802cec4865e9b848719374570b25e664c411a