-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Mar 2018 21:00:34 +0100 Source: libvorbisidec Binary: libvorbisidec-dev libvorbisidec1 Architecture: arm64 Version: 1.0.2+svn18153-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: arm Build Daemon (arm-arm-03) Changed-By: Salvatore Bonaccorso Description: libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files) libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor" Closes: 893132 Changes: libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147) (Closes: #893132) Checksums-Sha1: 376a0c480195dab482941e7ce9c19a9333520c9b 89760 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_arm64.deb c2f3006ca74b8faa544a811241e1120655b2cb17 4300 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_arm64.deb 67af5ba1b38a8be2f6d13632bcaffc1f6d4a45a2 63476 libvorbisidec1_1.0.2+svn18153-1+deb9u1_arm64.deb 94655234055a1838569edb0ea31cd92c0b653804 6649 libvorbisidec_1.0.2+svn18153-1+deb9u1_arm64.buildinfo Checksums-Sha256: a61e8a3a61271fca75c55dab88a44be9e9bfe715ba08722209220fb5974617e3 89760 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_arm64.deb 6a975aa2b8cc7daf92d0b83c5d325d1e7744edeeac52879b1d91f37422dbbdef 4300 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_arm64.deb 99d97fa37c9273cb0ed9fabaaeac1f21c10b43264fdd3d14d60418ddfb372bff 63476 libvorbisidec1_1.0.2+svn18153-1+deb9u1_arm64.deb 777ad14599f5b937bf6e928ffa6233c317150eb87366efcc921da5c4d2ef37d7 6649 libvorbisidec_1.0.2+svn18153-1+deb9u1_arm64.buildinfo Files: 86732f9323815d192f2d130e6d5d9573 89760 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_arm64.deb 82ccdded53ad0d07b7d2fa55aec359e5 4300 debug extra libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_arm64.deb 79823d592c19f898b4c8bdc95b2c09de 63476 libs extra libvorbisidec1_1.0.2+svn18153-1+deb9u1_arm64.deb 6ab1c8f3cdbc1ffa3ac877643c486ae5 6649 libs extra libvorbisidec_1.0.2+svn18153-1+deb9u1_arm64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzNDbPStAqZL+g+EBG/dKVN+TmdoFAlqsJk8ACgkQG/dKVN+T mdpyFhAArF5Kqf7ZKPFT8WHM7i9tFH//XBieWuGH7eZT2UEhQuXVFgbqUXxC3ZIT bZV2mpwa5Xtfpa14llBvHCpNnmZzrCIwzzNTHYH7Q5pbAblwWb/kPLlfhrW/rf1F AYIJLIJHLipoT7R4IumXkDcfK8K6ZhbWlWHykHhxy7GG+5zDh2Y+reA8lk2agI0b J8zFVpehwBTNwv8kGYSgsWp7OLDtG9RcbEXXrtIzfKAx8q21WXVJlE+AXdlvN7sY IOloS+oGxlNoGWB3AU603Ul1TDLhgju5KY4IJR3U0/hJD1MunNHcegsAt09CChUE 061Q4QEWaTZfOmA11Dz0LRK2Y+wAW4yTCWD4xqEqEnt/Av9qt24eTdZgsazbu9dp ld/6niA6UQdht1euqEPXUKGZ9Awi3Y/E4X8Roo2YxqZxJCmpmoCNRERDObaZ1tEc 97Hml4auQAZTpyedH0w0NpWmZ6ioddj4ixdn3xahDpBQ/G+4HB9hPKQ5Ri4yZUep +J8Y3uUBSyREk1J5eFvKWsd3ui/fKv//lt8lFxqZxbQ5oY3Dn8IVWweKzWexVZJj l5do9q9rZQVvTGfviOx2rG8L/NGSmZbxXCbFLBgc0pLsD2z378sUpQP7pqvQpKGg jjv76Qw4LjzsJh05zFLwHPSnoyDeWKzAZKni5ok7rBc7iu2yHgA= =9zt1 -----END PGP SIGNATURE-----