-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Mar 2018 21:00:34 +0100 Source: libvorbisidec Binary: libvorbisidec-dev libvorbisidec1 Architecture: armel Version: 1.0.2+svn18153-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: armhf Build Daemon (antheil) Changed-By: Salvatore Bonaccorso Description: libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files) libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor" Closes: 893132 Changes: libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147) (Closes: #893132) Checksums-Sha1: b93f1a0cee894e359416f2a27d2f95e0dfd092ab 90912 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_armel.deb fb1893b0d180964a12daa822b342a978a2db23b2 4744 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_armel.deb 2795de4edddc5665f83e2736fa23d708a6a95839 64238 libvorbisidec1_1.0.2+svn18153-1+deb9u1_armel.deb d571fc8397467a91207b3a1e579c9b229750e320 6619 libvorbisidec_1.0.2+svn18153-1+deb9u1_armel.buildinfo Checksums-Sha256: d04638150f4bd92a742502ba16daf7a7889b04484094ebfb7a719aa2f932dfa9 90912 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_armel.deb 860af33d5643cad5d662f494e71d280a5d62482be0ee54c6b19fcfa178a16f87 4744 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_armel.deb 57b33a65fcdc5843c63593b931289994e009a239c726286de93d4933b4d412d8 64238 libvorbisidec1_1.0.2+svn18153-1+deb9u1_armel.deb af8029920a31092ea9022724b7246fdcf017a488096ed8f89af22d8036c45c3c 6619 libvorbisidec_1.0.2+svn18153-1+deb9u1_armel.buildinfo Files: d1400cce52b022c99ea148f1409b4ae7 90912 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_armel.deb f9cc1da701d1f2a39f9ff1b841925ef4 4744 debug extra libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_armel.deb e983b82f9e7391974c57624f2648e902 64238 libs extra libvorbisidec1_1.0.2+svn18153-1+deb9u1_armel.deb 07974de9b84201b9e1f4772ead9c51aa 6619 libs extra libvorbisidec_1.0.2+svn18153-1+deb9u1_armel.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEs35Pb15w9UmrHo0iDTh4hYjO57MFAlqsJ4EACgkQDTh4hYjO 57NtMxAAm2F8ohaYSIraBIsrBpYr8jVCnpPJpTvJEW9hj4LitEwDSdfMUveGulYX ylBW453FUYU1lwyJ8d0/0Y5mNI5qvKBxiAa4xGvgfBiYlUoPQTTi759IkdOTsJhh XVh3YLHiINHeZwBnX6d4NdeHIdPvNU5PKq7nha7y1HQc5NuuY5SStCEtOSQ/Y7Vq wBP6ExVUqylULSZ95RPIjCbADmSKbFtW3VNsBTCtMBTJHpopfnizi7UatpWd6qzY +OfmN8SVlHj8napaNInzZDNHrInenAm+kCnTZ8vEj72J+hrH4H3J8PQDwDZZT+gz DWIoIGDRuA83iV4efaWxLHYNkVOoxTM4UX2NbzUKyWWj+r9Hz8F6i5ovZ+GbwF2Q JGFezq5Yu7PLyN3AR2taWtBF8aLDewNpn6pcnUJ8OKPBBuzesPTOPxWbOJenVRRa oB/VwHWZIXzAxOd4JAusPdXivSMd0x5nUyzR1VqX3IwVrvHNEymh18xQMVe/6sEI A5Mz061H+uzXGw0/SAkjxwT11j4T6nCG7EL7RJ5Q6bFCCRkJWHxc3OZQZSTUckZZ 6grFOCwKz9ohb96+tQZQt9XHdD1qhXvfHzBzRgkyi7imr5tEZlH5SRqKRCOrn9fN ddWHZTvnLiQS7KkjTaBVyqpNJ6BpGIfafzikP+GYUdBycUJRCjM= =6vZw -----END PGP SIGNATURE-----