-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Mar 2018 20:53:05 +0100
Source: libvorbisidec
Binary: libvorbisidec-dev libvorbisidec1
Architecture: armhf
Version: 1.0.2+svn18153-1~deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: armhf / armel Build Daemon (hoiby) <buildd_armhf-hoiby@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files)
 libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor"
Closes: 893132
Changes:
 libvorbisidec (1.0.2+svn18153-1~deb8u2) jessie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
     (Closes: #893132)
Checksums-Sha1:
 a5b94c3847ba6dc49e763a87686b697ba3f38a2b 90628 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_armhf.deb
 9ed8a84f321c747e02e03b9d42a4d24287820595 68896 libvorbisidec1_1.0.2+svn18153-1~deb8u2_armhf.deb
Checksums-Sha256:
 b4304e5043de24b1f90ba9b0a384a315694197457b64ee5c4c4d01640a23e8e2 90628 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_armhf.deb
 8af231107e1ef027a917f2de5bea99ed1e34aba2df2499c06fce08e7b54182e8 68896 libvorbisidec1_1.0.2+svn18153-1~deb8u2_armhf.deb
Files:
 344193e6c1ca25de269be4ebc73d890c 90628 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_armhf.deb
 62cc90f06e0c1ddc61259c51f767935e 68896 libs extra libvorbisidec1_1.0.2+svn18153-1~deb8u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=epJ4
-----END PGP SIGNATURE-----