-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 21 Mar 2018 20:53:05 +0100 Source: libvorbisidec Binary: libvorbisidec-dev libvorbisidec1 Architecture: source amd64 Version: 1.0.2+svn18153-0.2+deb7u1 Distribution: wheezy-security Urgency: low Maintainer: Daniel Kahn Gillmor <dkg@fifthhorseman.net> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files) libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor" Changes: libvorbisidec (1.0.2+svn18153-0.2+deb7u1) wheezy-security; urgency=low . * Non-maintainer upload by the Wheezy LTS Team. * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147) Checksums-Sha1: 4e5adeb009c5ee7d5838e9511530939e6c989afa 2179 libvorbisidec_1.0.2+svn18153-0.2+deb7u1.dsc e1f8e5281a92029a1bb325ecb247a6d9c8bf7199 149060 libvorbisidec_1.0.2+svn18153.orig.tar.gz 16e6d3a9d0fb84b39adc2f448dacc98b5297595a 6126 libvorbisidec_1.0.2+svn18153-0.2+deb7u1.diff.gz 5bd49437628d4ce99b618252342e6115935c861d 117610 libvorbisidec-dev_1.0.2+svn18153-0.2+deb7u1_amd64.deb 5340da9ffe9f5cb19b34a7bbe13c9f5b10431d69 83484 libvorbisidec1_1.0.2+svn18153-0.2+deb7u1_amd64.deb Checksums-Sha256: fb363fb4247ef0a337a20a6fbdaf238cba4cec0dd9de76e0722dba5f0975a1c2 2179 libvorbisidec_1.0.2+svn18153-0.2+deb7u1.dsc 4dc8c224289da3479fc10ce4e49ffbb85c790eb2fe55ef480934a265ee0a6782 149060 libvorbisidec_1.0.2+svn18153.orig.tar.gz 56eacd792c00d7fd9b2bf3af2f9465752b645016039ba8982d200938cd75ca10 6126 libvorbisidec_1.0.2+svn18153-0.2+deb7u1.diff.gz 87868326f74f109e8512d1bf55af81f8387eb7d89a3ddd89aaa4dc1d289c978b 117610 libvorbisidec-dev_1.0.2+svn18153-0.2+deb7u1_amd64.deb 04fcc12a4cc3dbe3dd4b660d26148501f505f6745b32f2dfc2ecb040d0c89b59 83484 libvorbisidec1_1.0.2+svn18153-0.2+deb7u1_amd64.deb Files: 978376ce072c418dba04df54c1b1edc4 2179 libs extra libvorbisidec_1.0.2+svn18153-0.2+deb7u1.dsc 4190859414c5d6760e316b5cf00fe7c5 149060 libs extra libvorbisidec_1.0.2+svn18153.orig.tar.gz f73fddb2d81c08a39451af4969632491 6126 libs extra libvorbisidec_1.0.2+svn18153-0.2+deb7u1.diff.gz d43c255dc23af4a925ad648a31a660a2 117610 libdevel extra libvorbisidec-dev_1.0.2+svn18153-0.2+deb7u1_amd64.deb 27cd26993c9250f09e37a32f0efc22bd 83484 libs extra libvorbisidec1_1.0.2+svn18153-0.2+deb7u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlqz/tpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR3UaD/0Zrj0Hfv5K9vOkrEerwB68ER1Q+59D L8DHs/40oA0Thx8TWc1vL4+oAmwbbQ+kawrsyFTwt5fiV6ZkntHHd1uLEpxvZhJM YYcaYNBtJPr5SltKK+3IbXM4fov6z16cqOXawzlUGRCLn/t9IewBaqezbLAcHmVh zWZ1CH6zmChSL5Up6h7nYTVrvIWADCnejN/F+SugNsp6/dWxgPLLESs1BIaPr7K4 HWEHoTmnLYe9IXKf509ZYS/LkFVnSqZBQ9il8Z9SiGZ5GZlsI3BRKWDANCwbwKkc 1G/20NapnZDERiAQqoCifPU1PN31SXxrh3nscU4fv3qr4vYicUPRrHPa8KHKUUNa Sa/vvEP2zsyzzKxNheywFcNSj5lFxxXPTin8zxlrH+kQ6tmKQFT6482DXhVo6eRf eacxj1nNMnxF1w6R3P4WaUmDzdJf6e/32nGp0j+WV7WWwFrebDigZD8HIoAJVWWN Sk1YytFO1mh34OhvTkyYUqLlUMryjC07GwF6YunAcApYhiqDMUYMlypw2co8sF8k JmoC78J+p+IpM7Q2FXT7a9UUBvHVlX4e1u7qzCyDRQtueWY1U2tUOAENUEOk9ddi bF+Ip5ergt/FOA3A2ec3qbcIMX07VaoaGz7mbBAIQUTDddmEURP32jy9XGWApiuA +aeqYRVbhauxMQ== =E9on -----END PGP SIGNATURE-----