-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 23 Apr 2021 10:36:37 +0200 Source: gst-plugins-good1.0 Architecture: source Version: 1.10.4-1+deb9u1 Distribution: stretch-security Urgency: medium Maintainer: Maintainers of GStreamer packages <pkg-gstreamer-maintainers@lists.alioth.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Closes: 986910 Changes: gst-plugins-good1.0 (1.10.4-1+deb9u1) stretch-security; urgency=medium . * CVE-2021-3497: oob write on matroska wavpack decoding (closes: #986910). Checksums-Sha1: 58dd231bf8cb0f56fcfc5c12eb60ec1257a92c65 3465 gst-plugins-good1.0_1.10.4-1+deb9u1.dsc 6ff3f3a7facae861c7687f27055fd9ced7c7fe10 3420980 gst-plugins-good1.0_1.10.4.orig.tar.xz 0e68782e50d2f85950943dc5e25794811eb3b983 38300 gst-plugins-good1.0_1.10.4-1+deb9u1.debian.tar.xz 5b5185dcf3a35d6049918a303d208d2dc1adc958 7583 gst-plugins-good1.0_1.10.4-1+deb9u1_source.buildinfo Checksums-Sha256: c03b068f725dba46ede46ce8a9c957026b93d45e9789a2a757e5b5a6d565bafa 3465 gst-plugins-good1.0_1.10.4-1+deb9u1.dsc 8a86c61434a8c44665365bd0b3557a040937d1f44bf69caee4e9ea816ce74d7e 3420980 gst-plugins-good1.0_1.10.4.orig.tar.xz 5640a4f103f08d085d614d5ef0581a993766394d4a0461e2f1eb3e4d44640535 38300 gst-plugins-good1.0_1.10.4-1+deb9u1.debian.tar.xz 7590ca175f9cded14996f7bca85b07da59f17e3c3a0c790ced4102b5d2de5713 7583 gst-plugins-good1.0_1.10.4-1+deb9u1_source.buildinfo Files: 45e699c907dac555f146aaa5f8f68fa2 3465 libs optional gst-plugins-good1.0_1.10.4-1+deb9u1.dsc cc0cc13cdb07d4237600b6886b81f31d 3420980 libs optional gst-plugins-good1.0_1.10.4.orig.tar.xz 882d80182b9b6083043abbb1449068bb 38300 libs optional gst-plugins-good1.0_1.10.4-1+deb9u1.debian.tar.xz cd689ea58ec47cef1f11db66aa57ea19 7583 libs optional gst-plugins-good1.0_1.10.4-1+deb9u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmCCrboACgkQnUbEiOQ2 gwI2pRAAgOSoB7TfSgSEUKY5UzKB7jpif+vucxMsiea26GtR0fQwSKchWdZO0h0E QukgHYixLyinVnMlYDUM552HuqUPMrMZ7V44OPSDTIVoBqyBBYsVhhxJx8frmKv1 tkmHufcYHttRno9FSTGRJ0x7UBGpf1ecz91zm8A1RYX272L0FNII7s6RwhQP6I+/ FahTc6s4/MMV1am9mm4aHa2TF7rTPgaA4SB9FP7o0vPAwIfLBdgiZ0kORtjDscEX dahEyGjxtIuaxGQrRgEximV7AXHuBQrAJShZqDzzONbXc50pFZIiM7r2WYb12uPM A+nAdMVoEwYj075QxLyseONZnrZLEOwo9JM3cUqxPrew96YVTo724gxP9QFuOkNu +B4bPMUxhL6uTEOOqr2LYbslFKtZ6zW5CJkwqdXFLxog0c866gzU4u/rskrNIFyW a5K9qQkikjB/gnTz1rCCSnhPHvi2USD1deywhGxkjLIBYA5tvnIwsM2kYEZBb56J 98+Ca0O4wcBIIeaNMpXN2O3Ck8EGRh0NU7wntqV9Ea7uMwcZaGjIAZ21+gzLJ7iY 7ji2krkOg6knlSKOFcfl8ieyOeDSsG+CzoqS5gh2DJ8xyrOuoaPmPxrj2yW05GyV r4CRIMYsSaXYONNUS9ugc2twSmYBNtMII0qcsw1KsQj95nk5LAI= =IlXU -----END PGP SIGNATURE-----