Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libvorbisidec@1.2.1%2Bgit20180316-3
purl pkg:deb/debian/libvorbisidec@1.2.1%2Bgit20180316-3
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-bxdr-5t7k-rbdn The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms.*Update: The 52.7.2 source release accidentally did not include this patch (the Mozilla-produced 52.7.2 binaries are fine). Anyone building 52.7.2 on ARM should use revision 5cd5586a2f48424a9031a3fa4c782954a9df9a52 instead of the released source. CVE-2018-5147

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T19:44:47.282836+00:00 Debian Oval Importer Fixing VCID-bxdr-5t7k-rbdn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-11T19:27:13.399155+00:00 Debian Oval Importer Fixing VCID-bxdr-5t7k-rbdn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T19:10:45.624670+00:00 Debian Oval Importer Fixing VCID-bxdr-5t7k-rbdn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0