[ubuntu/bionic-proposed] libvorbisidec 1.0.2+svn18153-1+deb9u1 (Accepted)

[Simon Quigley]

libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high

  * Non-maintainer upload by the Security Team.
  * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
    (Closes: #893132)

Date: Fri, 16 Mar 2018 21:00:34 +0100
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Maintainer: Debian QA Group <packages at qa.debian.org>
Origin: debian/stretch-security
https://launchpad.net/ubuntu/+source/libvorbisidec/1.0.2+svn18153-1+deb9u1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Mar 2018 21:00:34 +0100
Source: libvorbisidec
Binary: libvorbisidec-dev libvorbisidec1
Architecture: source
Version: 1.0.2+svn18153-1+deb9u1
Distribution: bionic-proposed
Urgency: high
Maintainer: Debian QA Group <packages at qa.debian.org>
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Description:
 libvorbisidec-dev - Integer-only Ogg Vorbis decoder, AKA "tremor" (Development Files)
 libvorbisidec1 - Integer-only Ogg Vorbis decoder, AKA "tremor"
Closes: 893132
Changes:
 libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
     (Closes: #893132)
Checksums-Sha1:
 5f7ec8bd627f834b961339d7a186fda470d93d46 2023 libvorbisidec_1.0.2+svn18153-1+deb9u1.dsc
 4a76cde3464f9489b058e9a33a2030f0d94b5980 6200 libvorbisidec_1.0.2+svn18153-1+deb9u1.diff.gz
Checksums-Sha256:
 443a3b7a4295875227477b220d5d2bb030aba6c1700165b64baa5a914dd4f51a 2023 libvorbisidec_1.0.2+svn18153-1+deb9u1.dsc
 9546b0b71df8a07e0680a7d713c5a969e862ee715f61045804ce2b46fd52267e 6200 libvorbisidec_1.0.2+svn18153-1+deb9u1.diff.gz
Files:
 28adaec9789fc55535f1f4e354e3e67e 2023 libs extra libvorbisidec_1.0.2+svn18153-1+deb9u1.dsc
 29b2b0cd76669fa75d0cbce3320dad0d 6200 libs extra libvorbisidec_1.0.2+svn18153-1+deb9u1.diff.gz
Origin: debian/stretch-security

-----BEGIN PGP SIGNATURE-----
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=UBU1
-----END PGP SIGNATURE-----