-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 11 Dec 2020 18:16:07 +0100 Source: xerces-c Binary: libxerces-c3.1 libxerces-c-dev libxerces-c-doc libxerces-c-samples Architecture: source Version: 3.1.4+debian-2+deb9u2 Distribution: stretch-security Urgency: high Maintainer: William Blough <devel@blough.us> Changed-By: Sylvain Beucler <beuc@debian.org> Description: libxerces-c-dev - validating XML parser library for C++ (development files) libxerces-c-doc - validating XML parser library for C++ (documentation) libxerces-c-samples - validating XML parser library for C++ (compiled samples) libxerces-c3.1 - validating XML parser library for C++ Changes: xerces-c (3.1.4+debian-2+deb9u2) stretch-security; urgency=high . * Non-maintainer upload. * CVE-2018-1311 mitigation: fix use-after-free vulnerability when processing external DTD, at the expense of a memory leak. Users may mitigate both by setting the XERCES_DISABLE_DTD environment variable. Checksums-Sha1: efcfe04a2e40df15d49f0516cfda129f29bcc4c0 1949 xerces-c_3.1.4+debian-2+deb9u2.dsc 2bb87f28f1af350811c7e23295ac140fed0df2d6 2376728 xerces-c_3.1.4+debian.orig.tar.gz 9f4bfbe7be187a541ea28f81710ed954b033d49c 25116 xerces-c_3.1.4+debian-2+deb9u2.debian.tar.xz 50442a47d7f5804edc1f5284c429fce105e8d676 9696 xerces-c_3.1.4+debian-2+deb9u2_amd64.buildinfo Checksums-Sha256: 4056c51e013e4ad5389190291b5f496ea0eb4c6225d5b4ed3cad765a83082918 1949 xerces-c_3.1.4+debian-2+deb9u2.dsc 4ab6acc4000362322c5f1568cfad32fdb5c49e96a1eaaaefd20f9ca24a406593 2376728 xerces-c_3.1.4+debian.orig.tar.gz 29fa49018b690efbed61650bb632f0f17212c560107c659e18b42b4a21c55664 25116 xerces-c_3.1.4+debian-2+deb9u2.debian.tar.xz e265cb2d7fb1fe2dec00aab5e84cc01b2a019244ecbedc4d515ec570b4c550e0 9696 xerces-c_3.1.4+debian-2+deb9u2_amd64.buildinfo Files: dd615c8c46151cbe04eec7be507dd37f 1949 libs optional xerces-c_3.1.4+debian-2+deb9u2.dsc 8a4ff3e17fc2e4b76d3c047fe0d511ff 2376728 libs optional xerces-c_3.1.4+debian.orig.tar.gz 95c74b481f11b2da721fc8ac3aa523fd 25116 libs optional xerces-c_3.1.4+debian-2+deb9u2.debian.tar.xz 2f8dcd92154ffa01c29d8edb193351e5 9696 libs optional xerces-c_3.1.4+debian-2+deb9u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEQic8GuN/xDR88HkSj/HLbo2JBZ8FAl/bSegACgkQj/HLbo2J BZ9lOwf/ctvLVuKK5DAKV0MvBmRkaA7V5O2cRnBeMcsvKdfK0Hg86ibk4f8Zl6ht 9DYd4eHDS5YL7sFuhEoTVoUXih5yYD/R5+NxfgI8BcKBIvv1rGUdELAB0iWbq/lX Pjx8oAEtyLBsqgUgo3eNGuuLzwYC5PbOFQMZNdfu330jMflwpNIix8F8om+Ud+iA ROx9t2oB3vzXEUWeSE0EbS28SDmJ4gK6e5+kKtigR2YaRg7/V8xG+oOV34Xc7/nZ rZX0IcglUfaZQR1PEV3jTapGW8Tjyk51hVQCTiV2ux6J6uJ/xM+vlYsE43s8YWTc tnkcOcYpc8jY4FRTHg0SNETeFrZ24g== =n/op -----END PGP SIGNATURE-----
