Ensure Tails 3.6.1 fixes the libvorbis pwn2own problem (CVE-2018-5146)

The pwn2own bug fixed by the upcoming Firefox/Tor Browser/Tails is actually in the embedded copy of libvorbis. Let’s ensure we ship a fixed libvorbis package. A DSA is being prepared.

Original created by @intrigeri on 15420 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information