-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Mar 2018 21:00:34 +0100
Source: libvorbisidec
Binary: libvorbisidec-dev libvorbisidec1
Architecture: amd64
Version: 1.0.2+svn18153-1+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files)
 libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor"
Closes: 893132
Changes:
 libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
     (Closes: #893132)
Checksums-Sha1:
 cc8b1077ff6519c86fde3ebecd2ec9a82919d3ca 96286 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_amd64.deb
 1033991e7d90b9d0ca240db235032eba1a65db03 4140 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_amd64.deb
 fc22aea69e04044a29c05a55898b2faeb19ae7e4 71164 libvorbisidec1_1.0.2+svn18153-1+deb9u1_amd64.deb
 24cbae5e736db58201ace46f2e4b3c592e572757 6810 libvorbisidec_1.0.2+svn18153-1+deb9u1_amd64.buildinfo
Checksums-Sha256:
 dd174d3db77cc1417e173fd22759bb95bcd981d709dec94165bb31763ac834fc 96286 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_amd64.deb
 5a2ac67101aac817f2a47129cffcfeaeb2de7476ea0b34893908ce44ffe3b44e 4140 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_amd64.deb
 3d79f9c4a9f58b00e8b09c43ab46c56fd45c8f323a6e4dc9f2e7d1dcb53f749b 71164 libvorbisidec1_1.0.2+svn18153-1+deb9u1_amd64.deb
 ccfb0deda2547818fba1c27e002d10d759bf3a55cbda50fe6229bbe5ee315c33 6810 libvorbisidec_1.0.2+svn18153-1+deb9u1_amd64.buildinfo
Files:
 45ebce987300b42c750ff1bfb2d5ae52 96286 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_amd64.deb
 0a3e17d9e4e1c196d49ca30a8aa333aa 4140 debug extra libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_amd64.deb
 c7d489019fcf1840dc0d06d1db8c7ec9 71164 libs extra libvorbisidec1_1.0.2+svn18153-1+deb9u1_amd64.deb
 7cb91975255a33d75935f0d68634ef2c 6810 libs extra libvorbisidec_1.0.2+svn18153-1+deb9u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=tRJv
-----END PGP SIGNATURE-----