Accepted libvorbis 1.3.5-4.2 (source) into unstable

[Salvatore Bonaccorso]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Mar 2018 22:26:37 +0100
Source: libvorbis
Binary: libvorbis0a libvorbisenc2 libvorbisfile3 libvorbis-dev libvorbis-dbg
Architecture: source
Version: 1.3.5-4.2
Distribution: unstable
Urgency: medium
Maintainer: Debian Xiph.org Maintainers <pkg-xiph-maint at lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil at debian.org>
Closes: 893130
Description: 
 libvorbis-dbg - debug files for Vorbis General Audio Compression Codec
 libvorbis-dev - development files for Vorbis General Audio Compression Codec
 libvorbis0a - decoder library for Vorbis General Audio Compression Codec
 libvorbisenc2 - encoder library for Vorbis General Audio Compression Codec
 libvorbisfile3 - high-level API for Vorbis General Audio Compression Codec
Changes:
 libvorbis (1.3.5-4.2) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Prevent out-of-bounds write in codebook decoding (CVE-2018-5146)
     (Closes: #893130)
Checksums-Sha1: 
 41b367c93ae3acdf783f10d7afe5e1b9a55ef994 2546 libvorbis_1.3.5-4.2.dsc
 a5e9d1232426c9379ffec0b80620e80129c3a318 12340 libvorbis_1.3.5-4.2.debian.tar.xz
Checksums-Sha256: 
 074430404ed9851708fa99c6028c6419c2eae6d57299e623b443d6079f8b3d87 2546 libvorbis_1.3.5-4.2.dsc
 22d0f18332c7f5fb06b8366e1653d18165284c07152a3af7872b70cde3a7fdfc 12340 libvorbis_1.3.5-4.2.debian.tar.xz
Files: 
 9412a65284d7f5b936b94abf6f46ee27 2546 libs optional libvorbis_1.3.5-4.2.dsc
 ca8a01e8ca40e87b85d8ea23c4e5483f 12340 libs optional libvorbis_1.3.5-4.2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=mYM9
-----END PGP SIGNATURE-----