-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Mar 2018 20:53:05 +0100
Source: libvorbisidec
Binary: libvorbisidec-dev libvorbisidec1
Architecture: amd64
Version: 1.0.2+svn18153-1~deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files)
 libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor"
Closes: 893132
Changes:
 libvorbisidec (1.0.2+svn18153-1~deb8u2) jessie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
     (Closes: #893132)
Checksums-Sha1:
 958437f6f0cd8c49295444786903385928e7ccf3 96672 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_amd64.deb
 b26030e0283a2579b70fb0b41afcb18421129107 71034 libvorbisidec1_1.0.2+svn18153-1~deb8u2_amd64.deb
Checksums-Sha256:
 0f3006dea08867317d630ca6316961342bb4f9d342efc66270580970d8b42fde 96672 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_amd64.deb
 b789b02f75d659d79fd48a1809799020f394064754fda16b2a5ac4d431cad5d7 71034 libvorbisidec1_1.0.2+svn18153-1~deb8u2_amd64.deb
Files:
 49a7bf1c0e8b7f0521d2b010188a3042 96672 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_amd64.deb
 0923731ce6ab09356b84b264790ac40a 71034 libs extra libvorbisidec1_1.0.2+svn18153-1~deb8u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=tanG
-----END PGP SIGNATURE-----