-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Mar 2018 21:00:34 +0100 Source: libvorbisidec Binary: libvorbisidec-dev libvorbisidec1 Architecture: armhf Version: 1.0.2+svn18153-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: armhf / armel Build Daemon (hoiby) Changed-By: Salvatore Bonaccorso Description: libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files) libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor" Closes: 893132 Changes: libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147) (Closes: #893132) Checksums-Sha1: b7db84c318a8a5af712e9df43ef830eb28a89781 92466 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_armhf.deb 6cf558cdf955049f289f0853ca6e7b6bbbe9d95f 4706 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_armhf.deb 81ce74c163dd75de7acebe2b6c688fcce403a5bd 67070 libvorbisidec1_1.0.2+svn18153-1+deb9u1_armhf.deb a99e188158c03fadc0bdf4fb4e6dd6b5bd2ab5c8 6619 libvorbisidec_1.0.2+svn18153-1+deb9u1_armhf.buildinfo Checksums-Sha256: 9b3455d283bd6c832a46c66c03addc4ed4b824b01958f2018d104a15e77fc83e 92466 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_armhf.deb d20a8b441d9872d5d78f429a005a8bda8fed20da86cf08c677c1df7e0ab7d6a1 4706 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_armhf.deb 7193ff351da5e4eac3b932985c725ec64ba19b5e3ac29155678232da54065de0 67070 libvorbisidec1_1.0.2+svn18153-1+deb9u1_armhf.deb bb56fd8b30c67b62d23c2b6414dedd1933680f1255f9cb3274f7e615985241ad 6619 libvorbisidec_1.0.2+svn18153-1+deb9u1_armhf.buildinfo Files: eedefac2abbe04defc06b68aef77057a 92466 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_armhf.deb e1a220262b640c1be3ef68d72ccd0bef 4706 debug extra libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_armhf.deb dbd02d4860ea8aefbbef38ce76c6bb71 67070 libs extra libvorbisidec1_1.0.2+svn18153-1+deb9u1_armhf.deb 9ac507006b52213ea91ee0dde281f794 6619 libs extra libvorbisidec_1.0.2+svn18153-1+deb9u1_armhf.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVYCP4cbgoWh38jdBrdWfmkaD7C0FAlqsJ8kACgkQrdWfmkaD 7C3KPRAAtBUcRj78RZCfg8ADMT5+MiByVjaHHWs8LQIXmw/FfALObZZk5oOtxyaG Z78Mq9RI4Cv2E79QeXenzt2OxQ32G4ocs2OxozoMNbnfns30wyq5SJqBT4VPuYWJ DX2/xSrQeSGw9+xaHbHH1jG6IU9labkMh+ovFCG4FWTR2YLNlmM1pjm1yfxvM/nQ 46GYSYqb3l9HlHClUpSohCpprKGaCg3BgzZmOaO9PrBrTRMGeL7PkFLu5QWzynD4 SK1Wg/ajkPvxQKSRwS+o+njv9+mCMdib4nLm+RoU+4nmEEveb1YM0mpNa4/9tSAx zQb4Ul/IVz5Hg5xxxohxw2H6+5P1PdCJ159BJnUAbCCBdqWAzSJwJD0GwrMI2HZG MKPtyOqnvUt9Ul76qCtqYjUub4kZunSNS0YEl59ntq5OOGqe59b5rVk/Vn/1cgX5 gsWU8FKKWA5tJ+FoV9HoQknQHpyWmvgHXKsgv3SxLc9ID/4qiMCVd5+d8vmrDsZf 9/ltc1Jh2X604hRaHrC6mKOYQz1qT6n8LeMDCcw2gmqYa+lo438JWLBthXqFOe0p dBulwlVNDw34vzPExxEqn61XJ/iojqVq6STceKw7UXQFI9tXQJEnxOHlCIPd3RUB jhmnXN2Am1+YXFGMVRwvbdWNkvVdFMKvCuxoGTtwRqToi9vecUU= =kyN3 -----END PGP SIGNATURE-----