-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Mar 2018 20:53:05 +0100 Source: libvorbisidec Binary: libvorbisidec-dev libvorbisidec1 Architecture: arm64 Version: 1.0.2+svn18153-1~deb8u2 Distribution: jessie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Salvatore Bonaccorso Description: libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files) libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor" Closes: 893132 Changes: libvorbisidec (1.0.2+svn18153-1~deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147) (Closes: #893132) Checksums-Sha1: 6b05add9cfb6c588ce6e30cfb1066709c461c696 90444 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_arm64.deb cad6d329de026a6acd528b9992c16e142f31812c 64996 libvorbisidec1_1.0.2+svn18153-1~deb8u2_arm64.deb Checksums-Sha256: f6c2af01e3959015c00ade22cf2e579e376c33b16ba6366a9f49143fd20bcfad 90444 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_arm64.deb d355e533fa14b7d785dcbe0526b44f3502db296cf2ac8bacf48fb5a1e0f171fb 64996 libvorbisidec1_1.0.2+svn18153-1~deb8u2_arm64.deb Files: 3a5ae08895645a1acb9cef2e50deeff4 90444 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_arm64.deb 5f3a2b28d75c88eb140c6057d987367f 64996 libs extra libvorbisidec1_1.0.2+svn18153-1~deb8u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0EK24mOlI1VWTSZd51VostzQ948FAlqsI8IACgkQ51VostzQ 948YNhAAmQDCojS6qXJomxvBblAOKev0sZ58wxdLTfZwboqTbHpDd7eVlwhrK98u a0hycxTPNuGaicNk8B0SqC4GYrXSm9DitDF/jAEWLbwsauvay6aUeTeVA6O+I07C AeFYsT3pXzOXc7xxaa2bafqcMSRMLF28YNmKLzthK+D16PETat9TZe8t/gGfem0E FmrgTGBzOqnoT/DErvTkQj8fdfu7mFfR7nkZO9Cs+LrUZprsY3G2PYPhReC25RBl yalo1KBy8IbH7BibPfZEKsE8MiM6ExBSWIOIK/V3f54kIA1sRgym1c+JTWnYIglr lOROLl/fNBxltF4PQOTpcShachytkS2SKszqpnId82ybsevNAR3GmZRa75hhany8 O9ks0/vQSfUUlf8RQLsxxkrR7ExPeQevsFajJmIk7cH0RmC8n2WGlUK2nfXx1MCa oAdtx3AJ81GoDMcJL7RdS1iM+HBDd8+FTpNB0aZY7DiGS0pWrRRveiRFfUe01xbC gUAy8vfystrcFgYOsYZiLoBn21PQzGq/NMWV8jtzYg9tszs7SRYv+ZKhac3IbJLm Lx/SrfQibclysoy3XSbbAlij3yBT4WXCvbMVHVMgkJcuQ+/nD8nzUClWD90uEEnx cMriGwuILDjHQYiLsy6kJgkYeEjx3lVKyZ2SoLeanXSCpX6HBcw= =s2U7 -----END PGP SIGNATURE-----