-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Nov 2021 21:10:41 +0200 Source: libvpx Binary: libvpx-dev libvpx4 libvpx-doc vpx-tools Architecture: source Version: 1.6.1-3+deb9u3 Distribution: stretch-security Urgency: medium Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Description: libvpx-dev - VP8 and VP9 video codec (development files) libvpx-doc - VP8 and VP9 video codec (API documentation) libvpx4 - VP8 and VP9 video codec (shared library) vpx-tools - VP8 and VP9 video codec encoding/decoding tools Changes: libvpx (1.6.1-3+deb9u3) stretch-security; urgency=medium . * Non-maintainer upload. * CVE-2020-0034: Fix an out-of-bounds buffer read on truncated key frames in vp8_decode_frame. Checksums-Sha1: f7926267496e00480ffe1dac666f8a3e8fbf4af0 2300 libvpx_1.6.1-3+deb9u3.dsc 9e41a6bb2b991f5542c264676ac452114cda9c7c 2493087 libvpx_1.6.1.orig.tar.gz fbda7e31ee71c1756496c96e5d1c00dcbd573dd8 15488 libvpx_1.6.1-3+deb9u3.debian.tar.xz Checksums-Sha256: 6ec01a2b03c1921100d6508249f55fae9912343573be5b4b7f6c92ed6eb7b402 2300 libvpx_1.6.1-3+deb9u3.dsc cda8bb6f0e4848c018177d3a576fa83ed96d762554d7010fe4cfb9d70c22e588 2493087 libvpx_1.6.1.orig.tar.gz d102fb6d73a00aeaf9234549e9558f4f56776d0916a6a97e3548ef31819ee014 15488 libvpx_1.6.1-3+deb9u3.debian.tar.xz Files: 43d12af4122a6da958dbddaf5d344432 2300 video optional libvpx_1.6.1-3+deb9u3.dsc b0925c8266e2859311860db5d76d1671 2493087 video optional libvpx_1.6.1.orig.tar.gz 7c67aebc37fe165119a24e5332108821 15488 video optional libvpx_1.6.1-3+deb9u3.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmGijUwACgkQiNJCh6LY mLGndw/+KvA/nSRe9aqm9e5OGK9eB+GUEyYCVTmw3K8ZA0vWP7Jf0L2Qu58YMMQ7 O7Vw5PmxtWSk5uTNpmxPW0IIe6E6bgk0btXweOYwnmoL7TA2fMQzKQ+Rfj4C7AlM FGkyepkPwHv5s6k5iwr4q2fpftO0MzfHzg/5dc8vn9L7lPykdc8kEqr1KMVhE44j 7zj3g11qQv5wILOFZA5dmbdYnKSNpGRYqz8VLiv8pk68QIevU3mlSHSWeZcbyk8o JNhT61lobs2semam36eL7mIEx5B7YRX/PtEdbKcBey6N40KInHmE/B0xjeF3P1zw yVxU09ddrJZL8yP1Bmfy6+vqTQmYAS3uNcuCVHkoWH6HavObFSm0SatSRMtpW7UJ 7P1lPFfeANwQsMMbAUJRA1//4f93fk5u0lNN6zmdn1z2DS75b9ZgSBBGtlgR0zpa v2wBa1lI5WgHG8mA5+nwPglO0W+W+hqTHA45lOSGBUhNEGdW6vE8xMBzJUFQppQh jgw17D3QiQv+VkFNiSdU85xt66WbHX18QleWUkb5h5odqLhH1r/pln4g2QXET/EC n9RfNJ4FByALq11mgJD948fWDHcuP+D1xGuV5ci6sUDUwAFsPrjbgy5/2G0blyAf NQGFmxWznFFuJ4cF+QEMXCr9lL4oH/i967brXdDNW+jbiIERCkQ= =e1z9 -----END PGP SIGNATURE-----