libvorbis -- various security issues

Red Hat reports:

Will Drewry of the Google Security Team reported several
flaws in the way libvorbis processed audio data. An
attacker could create a carefully crafted [Vorbis] audio file
in such a way that it could cause an application linked
with libvorbis to crash, or execute arbitrary code when
it was opened.