-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 31 Aug 2024 11:48:45 +0200
Source: expat
Architecture: source
Version: 2.6.2-2
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Closes: 1080149 1080150 1080152
Changes:
expat (2.6.2-2) unstable; urgency=high
.
* Backport security fix for CVE-2024-45490: reject negative len for
XML_ParseBuffer() (closes: #1080149).
* Backport security fix for CVE-2024-45491: detect integer overflow in
dtdCopy() (closes: #1080150).
* Backport security fix for CVE-2024-45492: detect integer overflow in
function nextScaffoldPart() (closes: #1080152).
Checksums-Sha1:
d005c9e3f12dba010ec571809262ff8325c1915a 1964 expat_2.6.2-2.dsc
162e27bd6ecdc2badbef226742766646336b800c 15176 expat_2.6.2-2.debian.tar.xz
Checksums-Sha256:
f41b25b086460dc7e448b8f833f442b29e32ba4117f4e8a534cbdbc65f14b409 1964 expat_2.6.2-2.dsc
48606436acd2c46dad97cab7bc8174899dbed6125fc3868c736b8422f8133c87 15176 expat_2.6.2-2.debian.tar.xz
Files:
2c55b88e7ebe78d994067a74c01087e5 1964 text optional expat_2.6.2-2.dsc
969866f035a9d08958f1b627fdbc5286 15176 text optional expat_2.6.2-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmbS7mUACgkQ3OMQ54ZM
yL+asQ//Yx6oxI05KUZOM5TjHpEFQrPAci2lX0MjCDRFmBvmclmuUkrR2xUlNv2A
L8KTfZxmPj9BL59uXuBh/jDYkzLxLWI76MKCEWSDRI7lVKKmWKjEt9UDe5cOarls
opP8RjPQyvWFO7B36o0WGggh0OlAZwvagsKbAwVvqfkjcS4W5MIFSqsTRFt0e0I2
4aKM7Ry++pzDPPSEyGDDUNR9yYuaRs3fbIB/BAEKpN3typEPpF4kuCtjU6ojV52g
G9eRoMXCKJTtt8pUFynxwbLGyIZbxX+DDOHlQD8zXu0fE8DVXj5f2rBfahXf0U1V
5QMPuYZdEbM8s8RqcWvWTuTpysliLOSgNsIrlesHdLadQBbvUEgKEJ9IhThA8nTh
IBOFfXKVK71G/hKRvA/Kf2l7IHpyLbhi8Vac3BadgGq9Tsa14Ib5H8qh6JwnK1Ua
BUPkTL1fbCJQZF7JyDXedKuuWSzbfMIj5jWBhdp9udp7h1n4Y9b2hjpKheW1DWGC
Hw8VEUN8ypm9Xidk5lMUHi96tVTcbeAyb+c+1ExBH4b6GF+JG5Ye/ryyZ7JGwbvu
ty8T2eGw65CWAP1fgT8tCxlUnG09Nv3JE18GrSac8bZfdeuRS04YSmEdQuWWJ2Rr
l4IXxzHK5eX0ke7jr2PcMC+bHefxP4JcrYzSu/7IL9LLzUCHiBY=
=3F2v
-----END PGP SIGNATURE-----
Attachment:
pgp4xjbtCjudL.pgp
Description: PGP signature