Accepted xerces-c 3.1.1-5.1+deb8u2 (all source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 14 May 2016 05:45:10 +0200
Source: xerces-c
Binary: libxerces-c3.1 libxerces-c-dev libxerces-c-doc libxerces-c-samples
Architecture: all source
Version: 3.1.1-5.1+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Jay Berkenbilt <qjb@debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 823863
Description:
libxerces-c-dev - validating XML parser library for C++ (development files)
libxerces-c-doc - validating XML parser library for C++ (documentation)
libxerces-c-samples - validating XML parser library for C++ (compiled samples)
libxerces-c3.1 - validating XML parser library for C++
Changes:
xerces-c (3.1.1-5.1+deb8u2) jessie-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* CVE-2016-2099: Use-after-free in heap on specially crafted XML input
(Closes: #823863)
Checksums-Sha1:
175d8f626fef082d6ac954437c65c9043e985c57 1965 xerces-c_3.1.1-5.1+deb8u2.dsc
eb96d10c6dde58c0e2960ede2d9d7ccf3002edc9 8928 xerces-c_3.1.1-5.1+deb8u2.debian.tar.xz
e6e2df3c96e6cb610c2b6d51989c8f0b0c0f2554 1294914 libxerces-c-doc_3.1.1-5.1+deb8u2_all.deb
Checksums-Sha256:
4b93a2dd309c6cf34366037af0dd5fd5bec5da33eea3b930f273f49efde55cec 1965 xerces-c_3.1.1-5.1+deb8u2.dsc
9426a484224bdaf996b1b5cf39c2027f426fe6c54c3c3db2a6fece2f8c8c4e64 8928 xerces-c_3.1.1-5.1+deb8u2.debian.tar.xz
0f39cddabbbb00d2d2e1a5fe820599dd114999f1fab6fd986ea8f01064120aa7 1294914 libxerces-c-doc_3.1.1-5.1+deb8u2_all.deb
Files:
f2b08e78b6019ca9c89df05e4d7d3bd6 1965 libs optional xerces-c_3.1.1-5.1+deb8u2.dsc
4386583b1ec44de4e6f6a02b0fe78abc 8928 libs optional xerces-c_3.1.1-5.1+deb8u2.debian.tar.xz
320c873a10cc33c6b726b3c09490d61c 1294914 doc optional libxerces-c-doc_3.1.1-5.1+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=hdlY
-----END PGP SIGNATURE-----
Reply to: