-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 17 Feb 2026 09:30:07 +0100
Source: libvpx
Binary: libvpx-dev libvpx7 libvpx7-dbgsym vpx-tools vpx-tools-dbgsym
Architecture: amd64
Version: 1.12.0-1+deb12u5
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Moritz Mühlenhoff <jmm@debian.org>
Description:
 libvpx-dev - VP8 and VP9 video codec (development files)
 libvpx7    - VP8 and VP9 video codec (shared library)
 vpx-tools  - VP8 and VP9 video codec encoding/decoding tools
Changes:
 libvpx (1.12.0-1+deb12u5) bookworm-security; urgency=medium
 .
   * CVE-2026-2447 (aka CVE-2026-1861)
Checksums-Sha1:
 9d5a143a41b20cd9fa17b70e25cc4761df4efc67 1154936 libvpx-dev_1.12.0-1+deb12u5_amd64.deb
 8a86702a5474cb5342a5a4c694dfcc71de14bf20 5561420 libvpx7-dbgsym_1.12.0-1+deb12u5_amd64.deb
 90efdcbc2744f5b997a11bd760b54c7744909d2d 1003444 libvpx7_1.12.0-1+deb12u5_amd64.deb
 b1ef8aa40d220678e62c1669f68f311cec1d94e9 7182 libvpx_1.12.0-1+deb12u5_amd64-buildd.buildinfo
 721f810c91f7025ba10a7966ad6991d72b2ad18c 1505156 vpx-tools-dbgsym_1.12.0-1+deb12u5_amd64.deb
 a322a2d5f5c15f85975e794f672eea005e5694ea 292900 vpx-tools_1.12.0-1+deb12u5_amd64.deb
Checksums-Sha256:
 81c2dee7f5264ca17819a33e9668ff7fcaee8209079951db9d028aa6580a5166 1154936 libvpx-dev_1.12.0-1+deb12u5_amd64.deb
 7bb66aa2519cbe001ec9b5f66a2b593687120e3b16a7e9e86ba5f587c6d08740 5561420 libvpx7-dbgsym_1.12.0-1+deb12u5_amd64.deb
 7d8fada67fc9e11a08304499fe5beb7f809194d284202b9c9f1a0b8e54b90db4 1003444 libvpx7_1.12.0-1+deb12u5_amd64.deb
 01fcf082b69fd2071083dcffe2e0dda81aa69ca5e3f2a6152d6d11d670d58ec7 7182 libvpx_1.12.0-1+deb12u5_amd64-buildd.buildinfo
 8599e9e143eb60998c890539ab54e8bd3b73efe11f7d81baf5dd97e54cae87bd 1505156 vpx-tools-dbgsym_1.12.0-1+deb12u5_amd64.deb
 51bca94236dc0fbee87f1a8727794f67ba8154f6a26d7118ecaa3ca9637c637e 292900 vpx-tools_1.12.0-1+deb12u5_amd64.deb
Files:
 dbc776072fb9ba50c456d2eb8a4b62e5 1154936 libdevel optional libvpx-dev_1.12.0-1+deb12u5_amd64.deb
 ab5d6a2b17746a91aefbb99dfcc97c7a 5561420 debug optional libvpx7-dbgsym_1.12.0-1+deb12u5_amd64.deb
 60ae3d776c3a50c0e222bec6d91e0da3 1003444 libs optional libvpx7_1.12.0-1+deb12u5_amd64.deb
 c940a5fce2e0c18d19882c54e997a0ad 7182 video optional libvpx_1.12.0-1+deb12u5_amd64-buildd.buildinfo
 827191483dd969a50ca1a427fda55dad 1505156 debug optional vpx-tools-dbgsym_1.12.0-1+deb12u5_amd64.deb
 2dcc7e923540b6c3ecbb6f2dd93d98c1 292900 utils optional vpx-tools_1.12.0-1+deb12u5_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmmUZlUACgkQIy3Pg040
HrBX5Q//WHOSvSe7TxL1p9bKSkbwF/ELpbRkjoWSHVcZJjGMcA7V1PpKP4b5tY8/
l+SmRhZjeCoRnga8rwqK2UuXu9Nl73KrsyD8EjOjAM5CjlT9N+X8VOQVF6r8iz3g
aTOtqzm7MY9CmLeToRWLIBsvH1pn/ChxkEeGLUaJjdK72Vj6kyEg8hT0dyqLYk/o
JqPiXpQfDidKuPnGAG/s8WdMHN92tTr+3L3WikeougnEo9ZVrakgrAMJDSw+CVVj
OK8j3JnsXw6KvXrUDK65D0YkYtjWpG+M8vIMd2lQFMuVWQPdPCF+MMN1g0oQOtQ2
U+iN8lKucwwrrX7sIbJS4fxtVVuRAghXRXhVtWu0kS51muq6xW0P6u7VWXWMEtl6
DmLk+zEB0QV4mXUVRrLumsPzoEyMArVCh4VH2lO9yYwwozDIBsApNPly9eBHhhlu
H6RIrbZqtkz4EOb097SF4gNnkmaWcpw61+J2Fk5LLxpZL0BXNE29xUHGkE3bqBLB
iAzlNp9qJ+2uX4svoB+Aqy427y7fJxXsRdfytzOgyxhZHb2tciRC9OZASA4uGccU
a9p71uZQNyZWJfATlOVbBYRYa4LJVo4cam5phOa4AQrGsE8Gb/3BguGL62ao4h2/
EIlrc40aUHnwlNJYc1Zf8mdQEIvTsrkxxn2LFYHKAcIgwMjUAgM=
=uwmn
-----END PGP SIGNATURE-----