-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 29 May 2021 20:34:02 +0200 Source: libxml2 Binary: libxml2 libxml2-utils libxml2-utils-dbg libxml2-dev libxml2-dbg libxml2-doc python-libxml2 python-libxml2-dbg python3-libxml2 python3-libxml2-dbg Architecture: source amd64 all Version: 2.9.4+dfsg1-2.2+deb9u5 Distribution: stretch-security Urgency: medium Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: libxml2 - GNOME XML library libxml2-dbg - Debugging symbols for the GNOME XML library libxml2-dev - Development files for the GNOME XML library libxml2-doc - Documentation for the GNOME XML library libxml2-utils - XML utilities libxml2-utils-dbg - XML utilities (debug extension) python-libxml2 - Python bindings for the GNOME XML library python-libxml2-dbg - Python bindings for the GNOME XML library (debug extension) python3-libxml2 - Python3 bindings for the GNOME XML library python3-libxml2-dbg - Python3 bindings for the GNOME XML library (debug extension) Changes: libxml2 (2.9.4+dfsg1-2.2+deb9u5) stretch-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2021-3541 Fix for "Parameter Laughs"-attack, that is similar to the "Billion Laughs"-attacks found earlier in libexpat. Checksums-Sha1: e11f344b664d6e99e643408bb827547515c97e7c 3053 libxml2_2.9.4+dfsg1-2.2+deb9u5.dsc ca9a4f7f1eab2b69ead6174885a5e6b1629ec956 2446412 libxml2_2.9.4+dfsg1.orig.tar.xz 721d375ab7e0a636b3c947b4c0b1e86636a7d4aa 38448 libxml2_2.9.4+dfsg1-2.2+deb9u5.debian.tar.xz 8cdb06971757f5fc791d9863dd6535d42e04de1f 1740480 libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb c3f74f44cc027fdb196627389c1ecd87686f1f20 812432 libxml2-dev_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 91135c1d384915f32f2d7fc51ee96113efa8dda8 829402 libxml2-doc_2.9.4+dfsg1-2.2+deb9u5_all.deb 89a0e681c604d314761ccd383bdbc28f6ec2328a 144678 libxml2-utils-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb b5dc613234a1d675c6767cb206b5ae194b94e420 103678 libxml2-utils_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 59969d34cc6f50e53a18c4ae2d677364838a6c4a 10743 libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.buildinfo 34cf2ad30e9ac88016299569325e03b3459f3e2b 921718 libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 93a2249c7b8eaaa2b0a2e22b55aeffd5ab81a6eb 404850 python-libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb bdeba4346bd7e6a1a44de1528ccd07e3ab3eac14 203744 python-libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb a823ee15d85633dfcbbc968171a12087bb3748e2 414782 python3-libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 273371b3d7c00bb9bd4a3b5274d78dba3d3cae78 188378 python3-libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb Checksums-Sha256: 9c390ac82ea5dd805a6c06c4c67021d19a49c7a50518da1cb4625797153ec190 3053 libxml2_2.9.4+dfsg1-2.2+deb9u5.dsc a74ad55e346aa0b2b41903e66d21f8f3d2a736b3f41e32496376861ab484184e 2446412 libxml2_2.9.4+dfsg1.orig.tar.xz f12334100f7ef475009bb64a145816280a9ddf1947dd82d990756937bf840236 38448 libxml2_2.9.4+dfsg1-2.2+deb9u5.debian.tar.xz 776e7c7082cd9f7a5d7fd570ae979734d93380e6d1e8068fd8b490f5f996f567 1740480 libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb a6d76a3a3503b0bea503f84b9b2a1e78406ffc4c44c61e89821637b1a851b5d6 812432 libxml2-dev_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 228713dd41f945c915b478e8987fa11937e10f4890ebb60001edec48546b77ea 829402 libxml2-doc_2.9.4+dfsg1-2.2+deb9u5_all.deb 77c201c2960a257befff696cd034e32e40f6ec7260071d248b0cb6692d1b34ab 144678 libxml2-utils-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 0d319cf03835b710064e63b70c3882f847e26236be6f60daab4b2c6483e4644e 103678 libxml2-utils_2.9.4+dfsg1-2.2+deb9u5_amd64.deb e5842d0406ac40a9b4203e5a1945f696a50955595c1860403a6479a44be4dd6c 10743 libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.buildinfo 7df896ee4a70da4af50521515f2bac592a7993864d8ee5ce7a2a4594e7e64288 921718 libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 69354e5fcbacca98013302f67ce74bdb45739d8bcb291355d8a0d47868e84343 404850 python-libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb dc4204deacf295df603a6b823e5c14121bc332a1b212fa2f74477fe53fa3719a 203744 python-libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb f5b6c81768225ea40a3bd44251ee1fe72df0437ceef71a7ec6cf4b61b825b479 414782 python3-libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb ab9e4e8a85c3cdf85e4f01252462f632e1b347f324620289e026ce8c15440e04 188378 python3-libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb Files: c7b688a2cb9c1be39061269c8bdedfb4 3053 libs optional libxml2_2.9.4+dfsg1-2.2+deb9u5.dsc 3ced197721416e7e2f13b0f4e0f1185b 2446412 libs optional libxml2_2.9.4+dfsg1.orig.tar.xz 09f512ad7b09c8e62d8cd5eaa032708e 38448 libs optional libxml2_2.9.4+dfsg1-2.2+deb9u5.debian.tar.xz 7668431ea80b45b4fd437d02c742ea1c 1740480 debug extra libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 0cfefe9cd180a645e1a634718b0cc3c5 812432 libdevel optional libxml2-dev_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 21f87746527fe3f1857edf5c86cf8c43 829402 doc optional libxml2-doc_2.9.4+dfsg1-2.2+deb9u5_all.deb 57ac6191b239cba0b857e892cd055295 144678 debug extra libxml2-utils-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb b8c88ebd0b7466fc4c61b12937183328 103678 text optional libxml2-utils_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 965d2f32045fb941832c6734e7876275 10743 libs optional libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.buildinfo 56bf95e452ee3cad83dee9799f667c36 921718 libs standard libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 680998718d5f0db94afc9c32c690407e 404850 debug extra python-libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb 3274b6f53a20869cd4eb9d79b6242d24 203744 python optional python-libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb b88af3ed41e4adf4cdec06af046d1447 414782 debug extra python3-libxml2-dbg_2.9.4+dfsg1-2.2+deb9u5_amd64.deb c4eec8c2d9b8927ce83a1070be436448 188378 python optional python3-libxml2_2.9.4+dfsg1-2.2+deb9u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmCzNHBfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR+ZsEACg6+R9gmkiMggB58YlwhYnBDML4nMF Xx2YVIymRADn7p8nNmPCWOdjl7bgmE6TZoa0AGqLViNPj5EluOZ8OBcKv+h+h93h Lnhoo3QtcafVqKq+raRcRyZTR1GwTX/5sOLPzIuwdM4JSXERBbDQxVEHCeQ+3i8Q sjqbDZbloYkrc4IkSso48WGvYGVbkc89tipn68L0485cYO99hosZWhePqMfXDvPd 7RAAmVd69toVdWQuNz2IMnOcjxbhBVArPe0xuLweqO6vir1yG97oRfi7eLndKGRh wt3Z7xCtlkL/5KGmQsd5na4xe5D2U9Ty9vcQQ8A+7CcsHv9eLARJGpt+YH+HKDyz io+AVtKaFaQWhYR+bFB6ApV7tDkzVqT4lCcD4h2fzSR0BxNoj2FaX6HM6yqpYjUJ ahGHFtZMGqDOyj9KHtr/ilmrLsknHQAyECLBeHZATAOk7Xw7bZqMhtEtX9exPEN2 vno5OW9vRCBpn1XPP/lFkM9edcCAQ1V5h6iQ3jjMrjMTNCWneHtusgBE7XpmezP+ n46bb6BgsX5fk1wjLj9dr1jVTvWE1Q+1JIH2Cc9UBW+hOLP5QPXwSwu1Ai30FdQQ chZE3c+jA6W0T1dixrgFHbt38a3FDBeHzOp2Oko6slpuhPum00m78lnJqeTQYebf wKGUzVqyOtp7Hw== =2wOo -----END PGP SIGNATURE-----