-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Jun 2024 13:01:27 +0300 Source: libvpx Binary: libvpx-dev libvpx7 libvpx7-dbgsym vpx-tools vpx-tools-dbgsym Architecture: amd64 Version: 1.12.0-1+deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Adrian Bunk Description: libvpx-dev - VP8 and VP9 video codec (development files) libvpx7 - VP8 and VP9 video codec (shared library) vpx-tools - VP8 and VP9 video codec encoding/decoding tools Changes: libvpx (1.12.0-1+deb12u3) bookworm-security; urgency=medium . * Non-maintainer upload. * CVE-2024-5197: Integer overflows Checksums-Sha1: 9518cca2d67f3fee38d99b6945be2df236695d37 1154768 libvpx-dev_1.12.0-1+deb12u3_amd64.deb 611934cd36f256bddd250d9d0734a9a69f17cbf6 5560084 libvpx7-dbgsym_1.12.0-1+deb12u3_amd64.deb c9610429ef8f45b53701e0f542cfab80f554da92 1003304 libvpx7_1.12.0-1+deb12u3_amd64.deb bf9d8e0fe9030677e91dd756acb5a1bde905afd3 7003 libvpx_1.12.0-1+deb12u3_amd64-buildd.buildinfo b599195e4d1472cea3e7ab42ff5e83cdf9f556a5 1505164 vpx-tools-dbgsym_1.12.0-1+deb12u3_amd64.deb 2368b6419bc70d74d0a7f75d4f1a970c3df8c288 292912 vpx-tools_1.12.0-1+deb12u3_amd64.deb Checksums-Sha256: dffe40dffa32d66c9a4da9935e7fc74339f160cebd3704cf8f7468e19e5f1004 1154768 libvpx-dev_1.12.0-1+deb12u3_amd64.deb 83debc0b390651ec5a8e5fc09fa772ff87932cbe6c60500cddced3a84e5fb5de 5560084 libvpx7-dbgsym_1.12.0-1+deb12u3_amd64.deb e1d195791c680b7901acfd86bc9eb2343dee41ae61c5922630a07bcc4e325693 1003304 libvpx7_1.12.0-1+deb12u3_amd64.deb 21ccba964d5d608d3b6f19db390b032df9ec99dd14f031b5b58ab1d07ae07b27 7003 libvpx_1.12.0-1+deb12u3_amd64-buildd.buildinfo b2027a093f53e22321414085af549b4f8c6bf4186de994e8284e935cdb663fb1 1505164 vpx-tools-dbgsym_1.12.0-1+deb12u3_amd64.deb 23d1b49d24bbbc2a0819b281af30f5ee770871b409b48d5cced7108a69d4d199 292912 vpx-tools_1.12.0-1+deb12u3_amd64.deb Files: 6c394f6a5af2d64a844936e4def2f838 1154768 libdevel optional libvpx-dev_1.12.0-1+deb12u3_amd64.deb fd2205d5650ddfb5962434cb3ffe3565 5560084 debug optional libvpx7-dbgsym_1.12.0-1+deb12u3_amd64.deb d65a3d96cace78b6834cdb85e779cf31 1003304 libs optional libvpx7_1.12.0-1+deb12u3_amd64.deb 54697a534fa093b71fb9a6a92366b4e2 7003 video optional libvpx_1.12.0-1+deb12u3_amd64-buildd.buildinfo 3846f913c8544bf1fa2cfc56580af538 1505164 debug optional vpx-tools-dbgsym_1.12.0-1+deb12u3_amd64.deb 357855881b40929e27f5e4db56216831 292912 utils optional vpx-tools_1.12.0-1+deb12u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Unr4QHS5Yi4rr9Q3KGKEAtjIVgFAmZ7KqkACgkQ3KGKEAtj IVggwg/+IHh5uOSGc4WUAZpmflxxUq4v5zRwGgAErTLBWwqagzvXNpYBjsHV5oBW wAXy5hlalZ+BOYMr9aZBR3jbrC/WQFp2PuXb5mXC6tRB5EXfuEVoVv3NiH5weDuZ AOUACQt2YEZvo3TBzjwioPgAwhlXyR2Ivau06xDMHzEoIfqwUVKqN7+MJ5ORmkm+ +ZqeOhehDGkPGTT74bMivn45qJj/pzJgr96dQ9AJ1peN6PZjMuLzV8b3/yzHUhF8 U7Rw1YgkkFFzNENJtOn5GVxbWKnfRbTrqxylKoPzFtQNA/64SMnwdwrSfB7Oyt1i XcX6SaIvdVWdNBZcrt9SWMYrTTEStPg4Dc/apolMba247c8i/QVyVCqqZCkuyayP GIRxrwXvfxFVrVN+4tVG5lBlRF/sFlq7nP/M5Hvt3KNWsOcFaBJV5z4uNmU7Ud/e HZE5uwsMuK+MXM2djtLR9BXhTClzqTfO560dg9o0dRIvqxCH7L3Crnb4BhcEdCj7 cW74543gngeSfTuf5Rd/yfzUS10/jE47Zy0kTCnuHahTrFbVmuxZK+Ixx1ssF3Cc aXkI/VoM8MB2TOPMTbcpL//hDANNRZIFI5B8EFPmz4CnXoWHf0BvCnjB/m2heGTz PrJxB6JGqh4R7XZexVoflmLCnjAQFSoD5UGpN8BnoYP+UXm0K7c= =r9Cl -----END PGP SIGNATURE-----