From pere at moszumanska.debian.org  Fri Apr  6 13:54:00 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 13:54:00 +0000
Subject: [libvorbisidec] branch master updated (e9c5698 -> 29e74c2)
Message-ID: <20180406135400.18115.98165@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to branch master
in repository libvorbisidec.

      from  e9c5698   Add d/gbp.conf file to enforce the use of pristine-tar.
       new  29e74c2   Adopt package into the Debian Xiph.org Maintainers group.

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/control | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 13:54:02 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 13:54:02 +0000
Subject: [libvorbisidec] 01/01: Adopt package into the Debian Xiph.org
 Maintainers group.
In-Reply-To: <20180406135400.18115.98165@moszumanska.debian.org>
References: <20180406135400.18115.98165@moszumanska.debian.org>
Message-ID: <E1f4RoY-0004jV-N7@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository libvorbisidec.

commit 29e74c20658fd4df674f1eef8ae69b8767c7f7ab
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Fri Apr 6 15:53:22 2018 +0200

    Adopt package into the Debian Xiph.org Maintainers group.
---
 debian/control | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/debian/control b/debian/control
index 1aac832..cdac1ca 100644
--- a/debian/control
+++ b/debian/control
@@ -1,9 +1,15 @@
 Source: libvorbisidec
 Priority: extra
-Maintainer: Debian QA Group <packages at qa.debian.org>
+Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint at lists.alioth.debian.org>
+Uploaders:
+ Ralph Giles <giles at thaumas.net>
+ , Martin Stegh?fer <martin at steghoefer.eu>
+ , Petter Reinholdtsen <pere at debian.org>
 Build-Depends: debhelper (>= 7.0.50), autotools-dev, devscripts, automake, libtool, libogg-dev, pkg-config
 Standards-Version: 3.8.3
 Section: libs
+Vcs-Git: https://anonscm.debian.org/git/pkg-xiph/libvorbisidec.git
+Vcs-Browser: https://anonscm.debian.org/cgit/pkg-xiph/libvorbisidec.git
 Homepage: http://wiki.xiph.org/index.php/Tremor
 
 Package: libvorbisidec-dev

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:02:48 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:02:48 +0000
Subject: [libvorbisidec] branch master updated (29e74c2 -> c184d92)
Message-ID: <20180406140248.10042.41023@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to branch master
in repository libvorbisidec.

      from  29e74c2   Adopt package into the Debian Xiph.org Maintainers group.
       new  06018cc   Change debhelper compat level from 7 to 10.
       new  851fa58   Changed Standards-Version from 3.8.3 to 4.1.3.
       new  1c447ef   Changed package priority from extra to optional.
       new  c184d92   Switch to source format 3.0 (quilt).

The 4 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/compat        | 2 +-
 debian/control       | 6 +++---
 debian/source/format | 1 +
 3 files changed, 5 insertions(+), 4 deletions(-)
 create mode 100644 debian/source/format

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:02:48 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:02:48 +0000
Subject: [libvorbisidec] 01/04: Change debhelper compat level from 7 to 10.
In-Reply-To: <20180406140248.10042.41023@moszumanska.debian.org>
References: <20180406140248.10042.41023@moszumanska.debian.org>
Message-ID: <E1f4Rx2-0002d3-F5@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository libvorbisidec.

commit 06018cc9de4b7ca75e723d7c5dc128e6ba275255
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Fri Apr 6 15:56:47 2018 +0200

    Change debhelper compat level from 7 to 10.
---
 debian/compat  | 2 +-
 debian/control | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/debian/compat b/debian/compat
index 7f8f011..f599e28 100644
--- a/debian/compat
+++ b/debian/compat
@@ -1 +1 @@
-7
+10
diff --git a/debian/control b/debian/control
index cdac1ca..f95df5d 100644
--- a/debian/control
+++ b/debian/control
@@ -5,7 +5,7 @@ Uploaders:
  Ralph Giles <giles at thaumas.net>
  , Martin Stegh?fer <martin at steghoefer.eu>
  , Petter Reinholdtsen <pere at debian.org>
-Build-Depends: debhelper (>= 7.0.50), autotools-dev, devscripts, automake, libtool, libogg-dev, pkg-config
+Build-Depends: debhelper (>= 10~), autotools-dev, devscripts, automake, libtool, libogg-dev, pkg-config
 Standards-Version: 3.8.3
 Section: libs
 Vcs-Git: https://anonscm.debian.org/git/pkg-xiph/libvorbisidec.git

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:02:48 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:02:48 +0000
Subject: [libvorbisidec] 02/04: Changed Standards-Version from 3.8.3 to 4.1.3.
In-Reply-To: <20180406140248.10042.41023@moszumanska.debian.org>
References: <20180406140248.10042.41023@moszumanska.debian.org>
Message-ID: <E1f4Rx2-0002dL-JM@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository libvorbisidec.

commit 851fa58b94dbc9bb2ede206cb630d79a53a94135
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Fri Apr 6 15:57:15 2018 +0200

    Changed Standards-Version from 3.8.3 to 4.1.3.
---
 debian/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/control b/debian/control
index f95df5d..f42895a 100644
--- a/debian/control
+++ b/debian/control
@@ -6,7 +6,7 @@ Uploaders:
  , Martin Stegh?fer <martin at steghoefer.eu>
  , Petter Reinholdtsen <pere at debian.org>
 Build-Depends: debhelper (>= 10~), autotools-dev, devscripts, automake, libtool, libogg-dev, pkg-config
-Standards-Version: 3.8.3
+Standards-Version: 4.1.3
 Section: libs
 Vcs-Git: https://anonscm.debian.org/git/pkg-xiph/libvorbisidec.git
 Vcs-Browser: https://anonscm.debian.org/cgit/pkg-xiph/libvorbisidec.git

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:02:48 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:02:48 +0000
Subject: [libvorbisidec] 03/04: Changed package priority from extra to
 optional.
In-Reply-To: <20180406140248.10042.41023@moszumanska.debian.org>
References: <20180406140248.10042.41023@moszumanska.debian.org>
Message-ID: <E1f4Rx2-0002dY-T5@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository libvorbisidec.

commit 1c447ef1d63fe7f673caef47d9b7891b33f4220d
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Fri Apr 6 15:57:43 2018 +0200

    Changed package priority from extra to optional.
---
 debian/control | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/control b/debian/control
index f42895a..9600de7 100644
--- a/debian/control
+++ b/debian/control
@@ -1,5 +1,5 @@
 Source: libvorbisidec
-Priority: extra
+Priority: optional
 Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint at lists.alioth.debian.org>
 Uploaders:
  Ralph Giles <giles at thaumas.net>

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:02:49 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:02:49 +0000
Subject: [libvorbisidec] 04/04: Switch to source format 3.0 (quilt).
In-Reply-To: <20180406140248.10042.41023@moszumanska.debian.org>
References: <20180406140248.10042.41023@moszumanska.debian.org>
Message-ID: <E1f4Rx3-0002dl-0v@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository libvorbisidec.

commit c184d9261c8fb344c09cd00bf00554160630d6fd
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Fri Apr 6 16:00:46 2018 +0200

    Switch to source format 3.0 (quilt).
---
 debian/source/format | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/source/format b/debian/source/format
new file mode 100644
index 0000000..163aaf8
--- /dev/null
+++ b/debian/source/format
@@ -0,0 +1 @@
+3.0 (quilt)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:19 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:19 +0000
Subject: [libvorbisidec] branch master updated (c184d92 -> 98aad25)
Message-ID: <20180406141919.4485.9619@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to branch master
in repository libvorbisidec.

      from  c184d92   Switch to source format 3.0 (quilt).
       new  20c54e1   Fix FTCBFS: Pass --build and --host to ./autogen.sh.
       new  98aad25   releasing package libvorbisidec version 1.2.1+git20180316-2

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Summary of changes:
 debian/changelog | 12 ++++++++++++
 debian/rules     |  8 +++++++-
 2 files changed, 19 insertions(+), 1 deletion(-)

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:19 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:19 +0000
Subject: [libvorbisidec] 01/02: Fix FTCBFS: Pass --build and --host to
 ./autogen.sh.
In-Reply-To: <20180406141919.4485.9619@moszumanska.debian.org>
References: <20180406141919.4485.9619@moszumanska.debian.org>
Message-ID: <E1f4SD1-0001DS-Af@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository libvorbisidec.

commit 20c54e1e278d5f163b945ce5be3ebc29b1f2d036
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Fri Apr 6 16:05:27 2018 +0200

    Fix FTCBFS: Pass --build and --host to ./autogen.sh.
    
    Patch from Helmut Grohne.
    
    Closes: #847463
---
 debian/rules | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index ea4ed2b..689390c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,9 +1,15 @@
 #!/usr/bin/make -f
+include /usr/share/dpkg/architecture.mk
+CONFIGURE_ARGS = --prefix=/usr
+ifneq ($(DEB_BUILD_ARCH),$(DEB_HOST_ARCH))
+CONFIGURE_ARGS += --build=$(DEB_BUILD_GNU_TYPE) --host=$(DEB_HOST_GNU_TYPE)
+endif
+
 %:
 	dh $@
 
 override_dh_auto_configure:
-	./autogen.sh --prefix=/usr
+	./autogen.sh $(CONFIGURE_ARGS)
 
 # fetch a new version of the upstream source, if anything has changed
 # in our directory since the last clean upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:19 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:19 +0000
Subject: [libvorbisidec] 02/02: releasing package libvorbisidec version
 1.2.1+git20180316-2
In-Reply-To: <20180406141919.4485.9619@moszumanska.debian.org>
References: <20180406141919.4485.9619@moszumanska.debian.org>
Message-ID: <E1f4SD1-0001E7-Di@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to branch master
in repository libvorbisidec.

commit 98aad25e3a07f31293436eccd6b6f319a249ab9d
Author: Petter Reinholdtsen <pere at hungry.com>
Date:   Fri Apr 6 16:09:55 2018 +0200

    releasing package libvorbisidec version 1.2.1+git20180316-2
---
 debian/changelog | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index c1c991d..0e92292 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,15 @@
+libvorbisidec (1.2.1+git20180316-2) unstable; urgency=medium
+
+  * Add d/gbp.conf file to enforce the use of pristine-tar.
+  * Adopt package into the Debian Xiph.org Maintainers group (Closes: #698378).
+  * Change debhelper compat level from 7 to 10.
+  * Changed Standards-Version from 3.8.3 to 4.1.3.
+  * Changed package priority from extra to optional.
+  * Switch to source format 3.0 (quilt).
+  * Fix FTCBFS: Pass --build and --host to ./autogen.sh. (Closes: #847463)
+
+ -- Petter Reinholdtsen <pere at debian.org>  Fri, 06 Apr 2018 16:07:41 +0200
+
 libvorbisidec (1.2.1+git20180316-1) unstable; urgency=high
 
   * QA upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:22 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:22 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn12153-1 created (now
 40109a7)
Message-ID: <20180406141921.5449.52062@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn12153-1
in repository libvorbisidec.

        at  40109a7   (tag)
   tagging  7d3e1b9ca291a700e7f4a7b34770b55b0fdd7eed (commit)
  replaces  upstream/1.0.2+svn12153
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:08 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn12153-1

Daniel Kahn Gillmor (1):
      Import Debian changes 1.0.2+svn12153-1

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:22 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:22 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn14261-1 created (now
 4c0e25f)
Message-ID: <20180406141921.5449.42715@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn14261-1
in repository libvorbisidec.

        at  4c0e25f   (tag)
   tagging  44383753cba96ee34e92a6c2e39dff121e926e10 (commit)
  replaces  debian/1.0.2+svn12153-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:09 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn14261-1

Daniel Kahn Gillmor (1):
      Import Debian changes 1.0.2+svn14261-1

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn14261

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:22 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:22 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn15687-1 created (now
 0eea18a)
Message-ID: <20180406141921.5449.79486@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn15687-1
in repository libvorbisidec.

        at  0eea18a   (tag)
   tagging  33965f15c5d682139c9b114b87ed2dcc23f7b28d (commit)
  replaces  debian/1.0.2+svn14261-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:11 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn15687-1

Daniel Kahn Gillmor (1):
      Import Debian changes 1.0.2+svn15687-1

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn15687

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:22 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:22 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn16259-1 created (now
 f58a7f8)
Message-ID: <20180406141921.5449.36535@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn16259-1
in repository libvorbisidec.

        at  f58a7f8   (tag)
   tagging  0a9e33564a55fd0e448b9e04e9c02b344d5354cb (commit)
  replaces  debian/1.0.2+svn15687-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:13 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn16259-1

Daniel Kahn Gillmor (1):
      Import Debian changes 1.0.2+svn16259-1

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn16259

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:22 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:22 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn16259-2 created (now
 9e42c67)
Message-ID: <20180406141921.5449.92480@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn16259-2
in repository libvorbisidec.

        at  9e42c67   (tag)
   tagging  71a511f90c0315c6eb1eb2969be0dc31c504b8bb (commit)
  replaces  debian/1.0.2+svn16259-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:14 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn16259-2

Daniel Kahn Gillmor (1):
      Import Debian changes 1.0.2+svn16259-2

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn18153-0.1 created
 (now 5cda896)
Message-ID: <20180406141922.5449.55693@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn18153-0.1
in repository libvorbisidec.

        at  5cda896   (tag)
   tagging  9cf4212b5e14da716a2cddc853fd93316a120f2a (commit)
  replaces  debian/1.0.2+svn16259-2
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:16 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn18153-0.1

Luk Claes (1):
      Import Debian changes 1.0.2+svn18153-0.1

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn18153

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn18153-0.2 created
 (now ca3973b)
Message-ID: <20180406141922.5449.28510@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn18153-0.2
in repository libvorbisidec.

        at  ca3973b   (tag)
   tagging  ce5d7bbf84728be04b7a3ee75967573820063315 (commit)
  replaces  debian/1.0.2+svn18153-0.1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:17 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn18153-0.2

Luk Claes (1):
      Import Debian changes 1.0.2+svn18153-0.2

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn18153-0.2+deb7u1
 created (now 9c0a165)
Message-ID: <20180406141922.5449.69688@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn18153-0.2+deb7u1
in repository libvorbisidec.

        at  9c0a165   (tag)
   tagging  18b3916c190d4484b1fe0dbdd0c288b8825eaeda (commit)
  replaces  debian/1.0.2+svn18153-0.2
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:36:20 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn18153-0.2+deb7u1

Thorsten Alteholz (1):
      Import Debian changes 1.0.2+svn18153-0.2+deb7u1

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  18b3916   Import Debian changes 1.0.2+svn18153-0.2+deb7u1

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] 01/01: Import Debian changes 1.0.2+svn18153-0.2+deb7u1
In-Reply-To: <20180406141922.5449.69688@moszumanska.debian.org>
References: <20180406141922.5449.69688@moszumanska.debian.org>
Message-ID: <E1f4SD5-0001bM-98@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to annotated tag debian/1.0.2+svn18153-0.2+deb7u1
in repository libvorbisidec.

commit 18b3916c190d4484b1fe0dbdd0c288b8825eaeda
Author: Thorsten Alteholz <debian at alteholz.de>
Date:   Wed Mar 21 20:53:05 2018 +0100

    Import Debian changes 1.0.2+svn18153-0.2+deb7u1
    
    libvorbisidec (1.0.2+svn18153-0.2+deb7u1) wheezy-security; urgency=low
    
      * Non-maintainer upload by the Wheezy LTS Team.
      * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
---
 codebook.c       | 18 +++++++++---------
 debian/changelog |  7 +++++++
 2 files changed, 16 insertions(+), 9 deletions(-)

diff --git a/codebook.c b/codebook.c
index f8b7983..1e1ae8a 100644
--- a/codebook.c
+++ b/codebook.c
@@ -258,7 +258,7 @@ long vorbis_book_decodevs_add(codebook *book,ogg_int32_t *a,
 	t[i] = book->valuelist+entry[i]*book->dim;
       }
       for(i=0,o=0;i<book->dim;i++,o+=step)
-	for (j=0;j<step;j++)
+	for (j=0;o+j<n && j<step;j++)
 	  a[o+j]+=t[j][i]>>shift;
     }else{
       for (i = 0; i < step; i++) {
@@ -267,7 +267,7 @@ long vorbis_book_decodevs_add(codebook *book,ogg_int32_t *a,
 	t[i] = book->valuelist+entry[i]*book->dim;
       }
       for(i=0,o=0;i<book->dim;i++,o+=step)
-	for (j=0;j<step;j++)
+	for (j=0;o+j<n && j<step;j++)
 	  a[o+j]+=t[j][i]<<-shift;
     }
   }
@@ -287,7 +287,7 @@ long vorbis_book_decodev_add(codebook *book,ogg_int32_t *a,
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	t     = book->valuelist+entry*book->dim;
-	for (j=0;j<book->dim;)
+	for (j=0;i<n && j<book->dim;)
 	  a[i++]+=t[j++]>>shift;
       }
     }else{
@@ -295,7 +295,7 @@ long vorbis_book_decodev_add(codebook *book,ogg_int32_t *a,
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	t     = book->valuelist+entry*book->dim;
-	for (j=0;j<book->dim;)
+	for (j=0;i<n && j<book->dim;)
 	  a[i++]+=t[j++]<<-shift;
       }
     }
@@ -352,15 +352,15 @@ long vorbis_book_decodevv_add(codebook *book,ogg_int32_t **a,\
     long i,j,entry;
     int chptr=0;
     int shift=point-book->binarypoint;
-    
+    int m=offset+n;
     if(shift>=0){
       
-      for(i=offset;i<offset+n;){
+      for(i=offset;i<m;){
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	{
 	  const ogg_int32_t *t = book->valuelist+entry*book->dim;
-	  for (j=0;j<book->dim;j++){
+	  for (j=0;i<m && j<book->dim;j++){
 	    a[chptr++][i]+=t[j]>>shift;
 	    if(chptr==ch){
 	      chptr=0;
@@ -371,12 +371,12 @@ long vorbis_book_decodevv_add(codebook *book,ogg_int32_t **a,\
       }
     }else{
       
-      for(i=offset;i<offset+n;){
+      for(i=offset;i<m;){
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	{
 	  const ogg_int32_t *t = book->valuelist+entry*book->dim;
-	  for (j=0;j<book->dim;j++){
+	  for (j=0;i<m && j<book->dim;j++){
 	    a[chptr++][i]+=t[j]<<-shift;
 	    if(chptr==ch){
 	      chptr=0;
diff --git a/debian/changelog b/debian/changelog
index 4114869..43f07b0 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+libvorbisidec (1.0.2+svn18153-0.2+deb7u1) wheezy-security; urgency=low
+
+  * Non-maintainer upload by the Wheezy LTS Team.
+  * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
+
+ -- Thorsten Alteholz <debian at alteholz.de>  Wed, 21 Mar 2018 20:53:05 +0100
+
 libvorbisidec (1.0.2+svn18153-0.2) unstable; urgency=low
 
   * Non-maintainer upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn18153-1 created (now
 b84838d)
Message-ID: <20180406141922.5449.8454@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn18153-1
in repository libvorbisidec.

        at  b84838d   (tag)
   tagging  4d30cbe64a2c38ce8302d30895802c2df62f0648 (commit)
  replaces  debian/1.0.2+svn18153-0.2
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:19 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn18153-1

Adrian Bunk (1):
      Import Debian changes 1.0.2+svn18153-1

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn18153-1+deb9u1
 created (now c7c4725)
Message-ID: <20180406141922.5449.42526@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn18153-1+deb9u1
in repository libvorbisidec.

        at  c7c4725   (tag)
   tagging  7a726db4a1d92cb51fd74b109839c2e7cb4ef5c6 (commit)
  replaces  debian/1.0.2+svn18153-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:38:47 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn18153-1+deb9u1

Salvatore Bonaccorso (1):
      Import Debian changes 1.0.2+svn18153-1+deb9u1

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  7a726db   Import Debian changes 1.0.2+svn18153-1+deb9u1

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] 01/01: Import Debian changes 1.0.2+svn18153-1+deb9u1
In-Reply-To: <20180406141922.5449.42526@moszumanska.debian.org>
References: <20180406141922.5449.42526@moszumanska.debian.org>
Message-ID: <E1f4SD5-0001dR-Ig@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to annotated tag debian/1.0.2+svn18153-1+deb9u1
in repository libvorbisidec.

commit 7a726db4a1d92cb51fd74b109839c2e7cb4ef5c6
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Fri Mar 16 21:00:34 2018 +0100

    Import Debian changes 1.0.2+svn18153-1+deb9u1
    
    libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high
    
      * Non-maintainer upload by the Security Team.
      * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
        (Closes: #893132)
---
 codebook.c       | 18 +++++++++---------
 debian/changelog |  8 ++++++++
 2 files changed, 17 insertions(+), 9 deletions(-)

diff --git a/codebook.c b/codebook.c
index f8b7983..1e1ae8a 100644
--- a/codebook.c
+++ b/codebook.c
@@ -258,7 +258,7 @@ long vorbis_book_decodevs_add(codebook *book,ogg_int32_t *a,
 	t[i] = book->valuelist+entry[i]*book->dim;
       }
       for(i=0,o=0;i<book->dim;i++,o+=step)
-	for (j=0;j<step;j++)
+	for (j=0;o+j<n && j<step;j++)
 	  a[o+j]+=t[j][i]>>shift;
     }else{
       for (i = 0; i < step; i++) {
@@ -267,7 +267,7 @@ long vorbis_book_decodevs_add(codebook *book,ogg_int32_t *a,
 	t[i] = book->valuelist+entry[i]*book->dim;
       }
       for(i=0,o=0;i<book->dim;i++,o+=step)
-	for (j=0;j<step;j++)
+	for (j=0;o+j<n && j<step;j++)
 	  a[o+j]+=t[j][i]<<-shift;
     }
   }
@@ -287,7 +287,7 @@ long vorbis_book_decodev_add(codebook *book,ogg_int32_t *a,
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	t     = book->valuelist+entry*book->dim;
-	for (j=0;j<book->dim;)
+	for (j=0;i<n && j<book->dim;)
 	  a[i++]+=t[j++]>>shift;
       }
     }else{
@@ -295,7 +295,7 @@ long vorbis_book_decodev_add(codebook *book,ogg_int32_t *a,
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	t     = book->valuelist+entry*book->dim;
-	for (j=0;j<book->dim;)
+	for (j=0;i<n && j<book->dim;)
 	  a[i++]+=t[j++]<<-shift;
       }
     }
@@ -352,15 +352,15 @@ long vorbis_book_decodevv_add(codebook *book,ogg_int32_t **a,\
     long i,j,entry;
     int chptr=0;
     int shift=point-book->binarypoint;
-    
+    int m=offset+n;
     if(shift>=0){
       
-      for(i=offset;i<offset+n;){
+      for(i=offset;i<m;){
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	{
 	  const ogg_int32_t *t = book->valuelist+entry*book->dim;
-	  for (j=0;j<book->dim;j++){
+	  for (j=0;i<m && j<book->dim;j++){
 	    a[chptr++][i]+=t[j]>>shift;
 	    if(chptr==ch){
 	      chptr=0;
@@ -371,12 +371,12 @@ long vorbis_book_decodevv_add(codebook *book,ogg_int32_t **a,\
       }
     }else{
       
-      for(i=offset;i<offset+n;){
+      for(i=offset;i<m;){
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	{
 	  const ogg_int32_t *t = book->valuelist+entry*book->dim;
-	  for (j=0;j<book->dim;j++){
+	  for (j=0;i<m && j<book->dim;j++){
 	    a[chptr++][i]+=t[j]<<-shift;
 	    if(chptr==ch){
 	      chptr=0;
diff --git a/debian/changelog b/debian/changelog
index ae7ee70..ebae443 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+libvorbisidec (1.0.2+svn18153-1+deb9u1) stretch-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
+    (Closes: #893132)
+
+ -- Salvatore Bonaccorso <carnil at debian.org>  Fri, 16 Mar 2018 21:00:34 +0100
+
 libvorbisidec (1.0.2+svn18153-1) unstable; urgency=medium
 
   * QA upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn18153-1_deb8u1
 created (now 78f8ec4)
Message-ID: <20180406141922.5449.60088@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn18153-1_deb8u1
in repository libvorbisidec.

        at  78f8ec4   (tag)
   tagging  61355cb09fb9c8e16fbe3b8214677cdde353de44 (commit)
  replaces  debian/1.0.2+svn18153-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:38:08 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn18153-1~deb8u1

Adrian Bunk (1):
      Import Debian changes 1.0.2+svn18153-1~deb8u1

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  61355cb   Import Debian changes 1.0.2+svn18153-1~deb8u1

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] 01/01: Import Debian changes 1.0.2+svn18153-1~deb8u1
In-Reply-To: <20180406141922.5449.60088@moszumanska.debian.org>
References: <20180406141922.5449.60088@moszumanska.debian.org>
Message-ID: <E1f4SD5-0001f9-R4@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to annotated tag debian/1.0.2+svn18153-1_deb8u1
in repository libvorbisidec.

commit 61355cb09fb9c8e16fbe3b8214677cdde353de44
Author: Adrian Bunk <bunk at debian.org>
Date:   Fri Apr 28 14:42:20 2017 +0300

    Import Debian changes 1.0.2+svn18153-1~deb8u1
    
    libvorbisidec (1.0.2+svn18153-1~deb8u1) jessie; urgency=medium
    
      * QA upload.
      * Rebuild for jessie.
---
 debian/changelog | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index ae7ee70..ebe7d24 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+libvorbisidec (1.0.2+svn18153-1~deb8u1) jessie; urgency=medium
+
+  * QA upload.
+  * Rebuild for jessie.
+
+ -- Adrian Bunk <bunk at debian.org>  Fri, 28 Apr 2017 14:42:20 +0300
+
 libvorbisidec (1.0.2+svn18153-1) unstable; urgency=medium
 
   * QA upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:23 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:23 +0000
Subject: [libvorbisidec] annotated tag debian/1.0.2+svn18153-1_deb8u2
 created (now ced32d5)
Message-ID: <20180406141922.5449.62641@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.0.2+svn18153-1_deb8u2
in repository libvorbisidec.

        at  ced32d5   (tag)
   tagging  09a4453118227debcb204aa58c557e8aae4676c9 (commit)
  replaces  debian/1.0.2+svn18153-1_deb8u1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:38:18 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.0.2+svn18153-1~deb8u2

Salvatore Bonaccorso (1):
      Import Debian changes 1.0.2+svn18153-1~deb8u2

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  61355cb   Import Debian changes 1.0.2+svn18153-1~deb8u1
       new  09a4453   Import Debian changes 1.0.2+svn18153-1~deb8u2

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] 01/01: Import Debian changes 1.0.2+svn18153-1~deb8u2
In-Reply-To: <20180406141922.5449.62641@moszumanska.debian.org>
References: <20180406141922.5449.62641@moszumanska.debian.org>
Message-ID: <E1f4SD6-0001h2-3V@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a commit to annotated tag debian/1.0.2+svn18153-1_deb8u2
in repository libvorbisidec.

commit 09a4453118227debcb204aa58c557e8aae4676c9
Author: Salvatore Bonaccorso <carnil at debian.org>
Date:   Fri Mar 16 20:53:05 2018 +0100

    Import Debian changes 1.0.2+svn18153-1~deb8u2
    
    libvorbisidec (1.0.2+svn18153-1~deb8u2) jessie-security; urgency=high
    
      * Non-maintainer upload by the Security Team.
      * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
        (Closes: #893132)
---
 codebook.c       | 18 +++++++++---------
 debian/changelog |  8 ++++++++
 2 files changed, 17 insertions(+), 9 deletions(-)

diff --git a/codebook.c b/codebook.c
index f8b7983..1e1ae8a 100644
--- a/codebook.c
+++ b/codebook.c
@@ -258,7 +258,7 @@ long vorbis_book_decodevs_add(codebook *book,ogg_int32_t *a,
 	t[i] = book->valuelist+entry[i]*book->dim;
       }
       for(i=0,o=0;i<book->dim;i++,o+=step)
-	for (j=0;j<step;j++)
+	for (j=0;o+j<n && j<step;j++)
 	  a[o+j]+=t[j][i]>>shift;
     }else{
       for (i = 0; i < step; i++) {
@@ -267,7 +267,7 @@ long vorbis_book_decodevs_add(codebook *book,ogg_int32_t *a,
 	t[i] = book->valuelist+entry[i]*book->dim;
       }
       for(i=0,o=0;i<book->dim;i++,o+=step)
-	for (j=0;j<step;j++)
+	for (j=0;o+j<n && j<step;j++)
 	  a[o+j]+=t[j][i]<<-shift;
     }
   }
@@ -287,7 +287,7 @@ long vorbis_book_decodev_add(codebook *book,ogg_int32_t *a,
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	t     = book->valuelist+entry*book->dim;
-	for (j=0;j<book->dim;)
+	for (j=0;i<n && j<book->dim;)
 	  a[i++]+=t[j++]>>shift;
       }
     }else{
@@ -295,7 +295,7 @@ long vorbis_book_decodev_add(codebook *book,ogg_int32_t *a,
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	t     = book->valuelist+entry*book->dim;
-	for (j=0;j<book->dim;)
+	for (j=0;i<n && j<book->dim;)
 	  a[i++]+=t[j++]<<-shift;
       }
     }
@@ -352,15 +352,15 @@ long vorbis_book_decodevv_add(codebook *book,ogg_int32_t **a,\
     long i,j,entry;
     int chptr=0;
     int shift=point-book->binarypoint;
-    
+    int m=offset+n;
     if(shift>=0){
       
-      for(i=offset;i<offset+n;){
+      for(i=offset;i<m;){
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	{
 	  const ogg_int32_t *t = book->valuelist+entry*book->dim;
-	  for (j=0;j<book->dim;j++){
+	  for (j=0;i<m && j<book->dim;j++){
 	    a[chptr++][i]+=t[j]>>shift;
 	    if(chptr==ch){
 	      chptr=0;
@@ -371,12 +371,12 @@ long vorbis_book_decodevv_add(codebook *book,ogg_int32_t **a,\
       }
     }else{
       
-      for(i=offset;i<offset+n;){
+      for(i=offset;i<m;){
 	entry = decode_packed_entry_number(book,b);
 	if(entry==-1)return(-1);
 	{
 	  const ogg_int32_t *t = book->valuelist+entry*book->dim;
-	  for (j=0;j<book->dim;j++){
+	  for (j=0;i<m && j<book->dim;j++){
 	    a[chptr++][i]+=t[j]<<-shift;
 	    if(chptr==ch){
 	      chptr=0;
diff --git a/debian/changelog b/debian/changelog
index ebe7d24..e78f5a1 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,11 @@
+libvorbisidec (1.0.2+svn18153-1~deb8u2) jessie-security; urgency=high
+
+  * Non-maintainer upload by the Security Team.
+  * Prevent out-of-bounds write in codebook decoding (CVE-2018-5147)
+    (Closes: #893132)
+
+ -- Salvatore Bonaccorso <carnil at debian.org>  Fri, 16 Mar 2018 20:53:05 +0100
+
 libvorbisidec (1.0.2+svn18153-1~deb8u1) jessie; urgency=medium
 
   * QA upload.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag debian/1.2.1+git20180316-1 created
 (now cc51c26)
Message-ID: <20180406141922.5449.5559@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.2.1+git20180316-1
in repository libvorbisidec.

        at  cc51c26   (tag)
   tagging  bdf068d235ad28e3e55af5b2deb50a3da521e9d9 (commit)
  replaces  debian/1.0.2+svn18153-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:20 2018 +0200

- Log -----------------------------------------------------------------
Debian release 1.2.1+git20180316-1

Julien Cristau (1):
      Import Debian changes 1.2.1+git20180316-1

Petter Reinholdtsen (1):
      Import Upstream version 1.2.1+git20180316

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag debian/1.2.1+git20180316-2 created
 (now ad22b2a)
Message-ID: <20180406141922.5449.15752@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag debian/1.2.1+git20180316-2
in repository libvorbisidec.

        at  ad22b2a   (tag)
   tagging  98aad25e3a07f31293436eccd6b6f319a249ab9d (commit)
  replaces  debian/1.2.1+git20180316-1
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 16:09:55 2018 +0200

- Log -----------------------------------------------------------------
tagging package libvorbisidec version debian/1.2.1+git20180316-2
-----BEGIN PGP SIGNATURE-----
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=Mqwy
-----END PGP SIGNATURE-----

Petter Reinholdtsen (8):
      Add d/gbp.conf file to enforce the use of pristine-tar.
      Adopt package into the Debian Xiph.org Maintainers group.
      Change debhelper compat level from 7 to 10.
      Changed Standards-Version from 3.8.3 to 4.1.3.
      Changed package priority from extra to optional.
      Switch to source format 3.0 (quilt).
      Fix FTCBFS: Pass --build and --host to ./autogen.sh.
      releasing package libvorbisidec version 1.2.1+git20180316-2

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag upstream/1.0.2+svn12153 created (now
 7320207)
Message-ID: <20180406141922.5449.74852@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag upstream/1.0.2+svn12153
in repository libvorbisidec.

        at  7320207   (tag)
   tagging  091a2cd650ab68312e2aef9b4f6f66175d41296a (commit)
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:07 2018 +0200

- Log -----------------------------------------------------------------
Upstream version 1.0.2+svn12153

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn12153

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag upstream/1.0.2+svn14261 created (now
 6f9813b)
Message-ID: <20180406141922.5449.98605@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag upstream/1.0.2+svn14261
in repository libvorbisidec.

        at  6f9813b   (tag)
   tagging  8265236515d3d06541d17ae3090a66911c65e2cb (commit)
  replaces  upstream/1.0.2+svn12153
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:09 2018 +0200

- Log -----------------------------------------------------------------
Upstream version 1.0.2+svn14261

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn14261

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag upstream/1.0.2+svn15687 created (now
 781fc66)
Message-ID: <20180406141922.5449.91373@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag upstream/1.0.2+svn15687
in repository libvorbisidec.

        at  781fc66   (tag)
   tagging  69749731c62f34010c217499d74b542ad5b91ed9 (commit)
  replaces  upstream/1.0.2+svn14261
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:10 2018 +0200

- Log -----------------------------------------------------------------
Upstream version 1.0.2+svn15687

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn15687

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag upstream/1.0.2+svn16259 created (now
 8644283)
Message-ID: <20180406141922.5449.24967@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag upstream/1.0.2+svn16259
in repository libvorbisidec.

        at  8644283   (tag)
   tagging  eda5f3aa8d5b3e2c2af65d3a9330d13ec6599943 (commit)
  replaces  upstream/1.0.2+svn15687
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:12 2018 +0200

- Log -----------------------------------------------------------------
Upstream version 1.0.2+svn16259

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn16259

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag upstream/1.0.2+svn18153 created (now
 90baa51)
Message-ID: <20180406141922.5449.8154@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag upstream/1.0.2+svn18153
in repository libvorbisidec.

        at  90baa51   (tag)
   tagging  bae50d7c4b04253e0845b62048bc6b445676fbdc (commit)
  replaces  upstream/1.0.2+svn16259
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:15 2018 +0200

- Log -----------------------------------------------------------------
Upstream version 1.0.2+svn18153

Petter Reinholdtsen (1):
      Import Upstream version 1.0.2+svn18153

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:19:24 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:19:24 +0000
Subject: [libvorbisidec] annotated tag upstream/1.2.1+git20180316 created
 (now 441bbc3)
Message-ID: <20180406141922.5449.74061@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to annotated tag upstream/1.2.1+git20180316
in repository libvorbisidec.

        at  441bbc3   (tag)
   tagging  303ce4c9bfd6abc85aed7312e132995424ce2f7a (commit)
  replaces  upstream/1.0.2+svn18153
 tagged by  Petter Reinholdtsen
        on  Fri Apr 6 15:30:20 2018 +0200

- Log -----------------------------------------------------------------
Upstream version 1.2.1+git20180316

Petter Reinholdtsen (1):
      Import Upstream version 1.2.1+git20180316

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:31:38 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:31:38 +0000
Subject: [libvorbisidec] branch debian/7 created (now 18b3916)
Message-ID: <20180406143138.20333.17753@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to branch debian/7
in repository libvorbisidec.

        at  18b3916   Import Debian changes 1.0.2+svn18153-0.2+deb7u1

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:31:38 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:31:38 +0000
Subject: [libvorbisidec] branch debian/8 created (now 09a4453)
Message-ID: <20180406143138.20333.50485@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to branch debian/8
in repository libvorbisidec.

        at  09a4453   Import Debian changes 1.0.2+svn18153-1~deb8u2

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git


From pere at moszumanska.debian.org  Fri Apr  6 14:31:38 2018
From: pere at moszumanska.debian.org (Petter Reinholdtsen)
Date: Fri, 06 Apr 2018 14:31:38 +0000
Subject: [libvorbisidec] branch debian/9 created (now 7a726db)
Message-ID: <20180406143138.20333.29755@moszumanska.debian.org>

This is an automated email from the git hooks/post-receive script.

pere pushed a change to branch debian/9
in repository libvorbisidec.

        at  7a726db   Import Debian changes 1.0.2+svn18153-1+deb9u1

No new revisions were added by this update.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-xiph/libvorbisidec.git