-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Mar 2018 20:53:05 +0100 Source: libvorbisidec Binary: libvorbisidec-dev libvorbisidec1 Architecture: s390x Version: 1.0.2+svn18153-1~deb8u2 Distribution: jessie-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Salvatore Bonaccorso Description: libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files) libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor" Closes: 893132 Changes: libvorbisidec (1.0.2+svn18153-1~deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147) (Closes: #893132) Checksums-Sha1: 5a2d9da876fcf85348a21b2b98af961e6aaa20a2 95154 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_s390x.deb b01e7b88cb83313ba51c2769942e798b2c38d331 70154 libvorbisidec1_1.0.2+svn18153-1~deb8u2_s390x.deb Checksums-Sha256: 8265b3e03837c3025740ebfb590d55004788190c7512c5dfa86160150a91f920 95154 libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_s390x.deb 63964e87efa338f23b7c79a4cea73bd7b5dfd133be0a781dc05352d48e398a69 70154 libvorbisidec1_1.0.2+svn18153-1~deb8u2_s390x.deb Files: 99e97d5b53021c0b2a0cc22aa1c83576 95154 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1~deb8u2_s390x.deb 1ed005e0fed58a184d31ff0b92c5ac72 70154 libs extra libvorbisidec1_1.0.2+svn18153-1~deb8u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZIVHsxgKd8iwU//OW0Rd05qVpNMFAlqsIzYACgkQW0Rd05qV pNOUSBAAkwfgNjj1j2/r1yJ01TbyLHbvtYZD+7vCzyo12rESTdOwzVQACP7DqnHZ q7vh5VGkkXjLA5ZbsSuCa24BEiustBxXEx5whOQomrccG8RNlodwoVUQAxNv+uPO pD75Ju3o5ebXaKBbJCdsx1m7pXRGJc25pgecV7StPMmety/mIXuxeHbYsQZl6S27 asUXiF2TWq2Wbts2f0T7NtHjn8ljKCWqnz+1wilyjBSxTkL8YWdW9tDr+J2AalcH /4GLFulFuoqRW9lZAXWWEVETKo8nBQMgmr8nUutV0g3bTkkKfo80kBExRFIhTLz6 ZGHYEyul0Fi/22xNKxFepBdbpPJ5W2AGyApJM/dZNK9wYj5RKJMLfVqMJ8WXSM3E u0ZY9NVdLOblTy5KfrVMxqThJvUy9rgbVDOsgsLlY/y6hbyM9rHMa9vSAMi5XFG2 4+r430KxgvRZYMSX7A0pjT8CoOhp0ZK1S7QU8m2JauoEaGJ2eAxEo1FUU5O7s4N6 00PUp0RtaJVwJIL5Crs0e7FBEuUnHnA84hMPvM/gRD/IUgVmXBDDki3T372Euva8 QErZC76RLmRY/t4yowU+DrR6dEPV5uxvYRtsKQOP2diiBYOpVRMdnQ8Zkagu1CF6 nTgQANZObAxMNhnfTwlxcSJzKPOxxZWAeoLITWIjhPP79gNq2Gg= =CxQx -----END PGP SIGNATURE-----