-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 28 Feb 2018 10:16:57 +0100 Source: libvpx Binary: libvpx-dev libvpx4 libvpx-doc vpx-tools Architecture: source amd64 all Version: 1.6.1-3+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Multimedia Maintainers <pkg-multimedia-maintainers@lists.alioth.debian.org> Changed-By: Ondřej Nový <onovy@debian.org> Description: libvpx-dev - VP8 and VP9 video codec (development files) libvpx-doc - VP8 and VP9 video codec (API documentation) libvpx4 - VP8 and VP9 video codec (shared library) vpx-tools - VP8 and VP9 video codec encoding/decoding tools Changes: libvpx (1.6.1-3+deb9u1) stretch-security; urgency=high . * Fix OOB caused by odd frame width (CVE-2017-13194) Checksums-Sha1: 4b39802cb9e2cfa323e4a1fd6825b7a1d1d81b1b 2300 libvpx_1.6.1-3+deb9u1.dsc 9e41a6bb2b991f5542c264676ac452114cda9c7c 2493087 libvpx_1.6.1.orig.tar.gz 136c7df67af04fed1242db72a1bdabbeb3886efd 12056 libvpx_1.6.1-3+deb9u1.debian.tar.xz ddd63cd34a912784eeee7c628fb57895d76ddc49 868378 libvpx-dev_1.6.1-3+deb9u1_amd64.deb d1385b58b8bef722ab479743101f3042573423bc 270726 libvpx-doc_1.6.1-3+deb9u1_all.deb 67f43de677eb422e7a5be2d4646a0618f13a2fe9 2965470 libvpx4-dbgsym_1.6.1-3+deb9u1_amd64.deb e51c8695a6756d90357e5fc8b311d242b546ce32 776192 libvpx4_1.6.1-3+deb9u1_amd64.deb 56454341a4ab25c5d4ae62ad124dfb4cc9aa1a7b 7212 libvpx_1.6.1-3+deb9u1_amd64.buildinfo ae059bd92977874ab4fa5c4a7f1e8fd9bebf2b75 1143554 vpx-tools-dbgsym_1.6.1-3+deb9u1_amd64.deb c4a9abacb24efc532084072942e3211768aa6357 252532 vpx-tools_1.6.1-3+deb9u1_amd64.deb Checksums-Sha256: 3fe979f54ed735ea878a73ca1504bed86bb5067eee977a7a421cccef0b91a381 2300 libvpx_1.6.1-3+deb9u1.dsc cda8bb6f0e4848c018177d3a576fa83ed96d762554d7010fe4cfb9d70c22e588 2493087 libvpx_1.6.1.orig.tar.gz 842dbf42a5ad4a0a318bea48fda8355980b52321e18b7c71a42f1aefafd1323b 12056 libvpx_1.6.1-3+deb9u1.debian.tar.xz 3f6f1dc967d5b00ce05988f33629eefc6b029afa6b4093245bad78aca15c0aa0 868378 libvpx-dev_1.6.1-3+deb9u1_amd64.deb 41844b83d40354d65e27577f31f8b4184dd296b6d8c37090192f608a25fe5aaa 270726 libvpx-doc_1.6.1-3+deb9u1_all.deb 71405cea812f267920585e88e53c64e69620786deda7963d698607f740ecb7ca 2965470 libvpx4-dbgsym_1.6.1-3+deb9u1_amd64.deb 578a01f30626c12a8fd3d14eae4b4e01ed8ecdb329592295c9ee15af3b99bfca 776192 libvpx4_1.6.1-3+deb9u1_amd64.deb e4f50b3237e08cafc90a51ed539d015dd1fbb9f97449a161cfb07b3aa71a32e4 7212 libvpx_1.6.1-3+deb9u1_amd64.buildinfo 2617a1fc200b3aaa41df371efce366823b4315d43455499009d988b99c477a4c 1143554 vpx-tools-dbgsym_1.6.1-3+deb9u1_amd64.deb 599e96a31266fc0b5fc8527c460d9c1b1991ef114f93729fa2e8adcdd5936743 252532 vpx-tools_1.6.1-3+deb9u1_amd64.deb Files: 6cc7a1efd2ac30d8b10a860912e46599 2300 video optional libvpx_1.6.1-3+deb9u1.dsc b0925c8266e2859311860db5d76d1671 2493087 video optional libvpx_1.6.1.orig.tar.gz 49fe27b24ff0036261210a07c7c3a2e3 12056 video optional libvpx_1.6.1-3+deb9u1.debian.tar.xz 7fe323ea7897147501df9d9427db2c06 868378 libdevel optional libvpx-dev_1.6.1-3+deb9u1_amd64.deb 05961fa9af23fba286fc19af7b2e1396 270726 doc optional libvpx-doc_1.6.1-3+deb9u1_all.deb 2824a057c7858e0f927e1a9b7e524b42 2965470 debug extra libvpx4-dbgsym_1.6.1-3+deb9u1_amd64.deb 458c401cf9569287372a90db7348264d 776192 libs optional libvpx4_1.6.1-3+deb9u1_amd64.deb 1b535200cfac1ebcb2110ab52f520bad 7212 video optional libvpx_1.6.1-3+deb9u1_amd64.buildinfo 812b617cd49037d7fbf6e22e5f113675 1143554 debug extra vpx-tools-dbgsym_1.6.1-3+deb9u1_amd64.deb 7264ae9422ad028b850b41bb8e4baab3 252532 utils optional vpx-tools_1.6.1-3+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPZg8UuuFmAxGpWCQNXMSVZ0eBksFAlqXAyoACgkQNXMSVZ0e BkvHYA/8DtpzXBzZO1/+Jvs0hvFqToB+GfgV5lSR/PD/HYCuLpDPnkRvNefkJXTY 7CKfStR20PTAnA8MjBHEvLTu1h/YvqSxBINVEO/pWry02onvuVaL7/aQfslZ++OJ L9nrvlvmBFuhIW1LzvRDnSWTQ+9R5WYALd2tLaKItXP9iCfYIzw+IS1oq2tLgbLV AVtioNi8/2b9B4JjNEaAnttZcp6klu/sRRGQaDxSCtxr2Nj4YH09DwaHRMcgDJ9N PeYuH5fdCMGWAA3bV2fpjDoWh/ZCkt8qg8HeNFUs/V5En8zpVoc9g3k++LVr+xeZ zVSSfrBlzGZGyGEkJ4oFWSLL+et3AFRCwLMO3SU7YYPM2cnaRb1VUuh54uNY+wGJ lgDd3ln8PsZ/EplnJt4ldKQuO6/keyHjsyy9LcOo4oUg4X5olWBj2KLU0UEOV0Fk gL+S6x3JyiY9Br3KYon6F0Z5dVUXT4dVytLkkr5AABt74IxichLN9RpQhPoAezao 0wYjdzdlDOgH24t3nlGinnoOwLp5yMBlOvqV9qHX/DxKR7GEBo8eWy66R/N3A3BL WCiy0yQWLkk5BuD/1wUowurYs32zzm5ohY/a9WAPfGp2paDqwc9R+GTWeC3T/UJ9 75BDxSwWCuGqVZ80evtTl/zkjX/tVunH9zhAsXssB2+HpTWcfwg= =qte+ -----END PGP SIGNATURE-----