-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Mar 2018 21:00:34 +0100 Source: libvorbisidec Binary: libvorbisidec-dev libvorbisidec1 Architecture: mips Version: 1.0.2+svn18153-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: mips Build Daemon (mips-aql-04) Changed-By: Salvatore Bonaccorso Description: libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files) libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor" Closes: 893132 Changes: libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147) (Closes: #893132) Checksums-Sha1: f316e3b4321b36c69874aa8d111badbd300c358a 98554 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_mips.deb 491f83def7f87f7c08749f56a07b6eb68d432e31 4758 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_mips.deb 9c6f062aa8de27f664a44612c65f341c57df5a20 68538 libvorbisidec1_1.0.2+svn18153-1+deb9u1_mips.deb 8b3d89453940c8849bb39893de9f38ef4dbec6e7 6545 libvorbisidec_1.0.2+svn18153-1+deb9u1_mips.buildinfo Checksums-Sha256: 4bcd6b293d74f9f332d6ebfcbd044e12dd9efc6588d7e4a8ee59c884629b359f 98554 libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_mips.deb 86e81790524071598b58e09c9f9a66a377c4e8f19278b025a875b884b0c000d2 4758 libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_mips.deb 366a60bd29e40fa32069613ba1b51e7ffb806317d9f5d1e7c2036061ba52c445 68538 libvorbisidec1_1.0.2+svn18153-1+deb9u1_mips.deb 7bf64034dacd7fd249b6ef765d32d326f738226dcfb11b2c6672299aaf996070 6545 libvorbisidec_1.0.2+svn18153-1+deb9u1_mips.buildinfo Files: 2fa0d2471fae80fc9249914a63337658 98554 libdevel extra libvorbisidec-dev_1.0.2+svn18153-1+deb9u1_mips.deb 9417280ae6d96418a7c19d2d0db77303 4758 debug extra libvorbisidec1-dbgsym_1.0.2+svn18153-1+deb9u1_mips.deb 0cd5c5358d8a4ccdc89f4d40e92c47b3 68538 libs extra libvorbisidec1_1.0.2+svn18153-1+deb9u1_mips.deb 2049979625d5778891bd81f756ac5271 6545 libs extra libvorbisidec_1.0.2+svn18153-1+deb9u1_mips.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEtw3wYzK5ALKryIaKmJEoUvJgunsFAlqsK8oACgkQmJEoUvJg unvKHw//Sma5HrCaPjE8c6iKhKMFxB7BTaoOMrukVjUVQ/0t9f6lMQtzViRwdGvN aQ9cH9AvQTHimyr1yJsrKQ9Ke0lRUs+Vzm0Gubalq8T18viogpYcTws9W4r8kBVi aQkvSkYe5vVfSKl/9lpk4gkIkoy/ebbL4/OgQcc6B/UBSs5ZriTnULo6ucbJ698w Z/W0U72RgS1jlsLIbwTapolcnol1DeTOMzSsUORtYlSgqg+Qfzu+802KM8ZsfaMM nvUlxGIRVAK4rfKFNtePl61E+Q+B6mCSQfKQ2jJFFpTLVkQG4g5n1QaGmtd8c3qj Fsi+eHPYr4CVHwhSpy5h/6tbDoAQ7Hl7X2GE7YNGEc6kOeatR/F0DRkWSP+OxjnK bzlxv/5xIy2eRBTtn7bTJX0SFgt/BdI2/Q62MjczZitE3igxo3wgdOTnijfuJ4sy ickOhAock9S+BvQZUooc3GsqogGynPsd7PphEipQOLqPg95JKMMOSiVmE1aNayEh OOHTAEuNOdbGugaKNSTBLPKdQ8CLnvSOPYIbdLIxfgr8mhuK3DRvTrUxW4N2PEoN RwKzMfg7JPTovj2bpfQ6hEkQ1xBoX3Tyd3gw131HhzuAnCzDjtbZQh1LlNSp/mVL 1q/MwUUG7BXogGwZshBNf3+kjRRaNj//UXzz2C3/lCZZZoULVl8= =bP2x -----END PGP SIGNATURE-----