-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 21 Feb 2026 17:03:02 +0100 Source: libvpx Architecture: source Version: 1.9.0-1+deb11u5 Distribution: bullseye-security Urgency: high Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: libvpx (1.9.0-1+deb11u5) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2026-2447 (aka CVE-2026-1861) fix heap buffer overflow Checksums-Sha1: 88677eda7b0f5c64f2493dc07fd2cd875b9c652f 2438 libvpx_1.9.0-1+deb11u5.dsc 2ab8203ad8922bdf3256e4a197d1348fa8db9a62 5326239 libvpx_1.9.0.orig.tar.gz 81e6bd85c801a7a7cfeb1eb63e8f4331172853d9 19160 libvpx_1.9.0-1+deb11u5.debian.tar.xz 39acd06eefec1f961c261fe2ec5d60dcf4777224 7989 libvpx_1.9.0-1+deb11u5_amd64.buildinfo Checksums-Sha256: dca95e3948e2078fdb93650e8dcc59b245889cc9b0dab8f5cba67c0aef48dc7a 2438 libvpx_1.9.0-1+deb11u5.dsc d279c10e4b9316bf11a570ba16c3d55791e1ad6faa4404c67422eb631782c80a 5326239 libvpx_1.9.0.orig.tar.gz 659f3ff381bcc860becc206306d2e036f6f99c1ec6223b89d25b64ce9040fd2e 19160 libvpx_1.9.0-1+deb11u5.debian.tar.xz ec1b2d12187107a7c5b813496f9598cfb13ee5da5bf67ab8c31c90fc2493c48a 7989 libvpx_1.9.0-1+deb11u5_amd64.buildinfo Files: 8e366f9ad727e7969bba797aa30239b3 2438 video optional libvpx_1.9.0-1+deb11u5.dsc e5fab59896984392124d0bfaffc36e14 5326239 video optional libvpx_1.9.0.orig.tar.gz 97c5f30ae65eea2500a1c8d077389a50 19160 video optional libvpx_1.9.0-1+deb11u5.debian.tar.xz af0aab16297ac8627f628e4d149880d6 7989 video optional libvpx_1.9.0-1+deb11u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmmbQ4lfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR7VvD/41P6kxVBd5Rcntue8pBHCd0uMepzHJ dbr/GWa+JK/DmqVCYzLj6rRofY9rLMSUwz/SkyoiiPRiKjUHVhuL6zpJNATGgF9Y dJWV3e/EFGxkhYFH3f8+f2Mg2zZ3r0Is/t6x0u9+Kilvf56R5Wc6WtJdFqXWmslG GFimaZdzFKBv97EY7cur965wdLnr+C4ks/zA9gToJbpXsH2tM1U2BEyOsWGBvcaG geL622CPQ3Uaxb251EUtk0EWIQpDpi+UwHGmQIXgMp8AR4aetQ+yei+EA4wVbmQQ jBQ+9+UaOBzKFQSF7eocpJsSiYl6aQ+gdBWUirotj4R6UfngPFDE8XLuTN8FLbug PrhdzDhIOG15Z5PcSai1f4qTYWwXZOjY7HwJFgs+kYx/BvkTDZHwX7h592AlW1zc KJD0JSL4Jz+kA1Ex5cKwjU0Jchjyhz5rSyRoGIXhN2Gs4x5Z4eK5Td5S6f/9lgaE Ea6nuEMkawOyE+jH/1653HiY1HltVZ7we4LlLW5qajSoK+YhBFSV5tm9xYqLZRmj 1Tb6AsfaHA2FQ/IKutmUvNpCL5Hxxke3Sh/HoBeHgluuJmjkqDHHtCbWQFzezGCd 8LdFIUokU+H3Zwp9t3BZCbOlFLvcFHUObeSD10JRfmIy5wTf/ryOwJywot9YWZfA udnJsoBA0/V7Mw== =XR0k -----END PGP SIGNATURE-----
