libvorbis vulnerabilities (AlmaLinux)

2 vulnerabilities.

• libvorbis AlmaLinux bark_noise_hybridmp in psy.c in Xiph.Org libvorbis 1.3.6 has a stack-based buffer over-read. CVE-2018-10393 Fix available 7.5 HighApril 26, 2018
• libvorbis AlmaLinux mapping0_forward in mapping0.c in Xiph.Org libvorbis 1.3.6 does not validate the number of... CVE-2018-10392 Fix available 8.8 HighApril 26, 2018