Debian: New libvorbis packages fix several vulnerabilities

LinuxSecurity.com: libvorbis does not properly handle a zero value which allows remote attackers to cause a denial of service (crash or infinite loop) or trigger an integer overflow.

More...