-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 24 Sep 2022 11:03:02 +0200 Source: expat Architecture: source Version: 2.2.6-2+deb10u5 Distribution: buster-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: expat (2.2.6-2+deb10u5) buster-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2022-40674 heap use-after-free issue in doContent() (based on the backport for Bullseye made by Laszlo Boszormenyi) * update test-* patches to be able to run testsuite * debian/rules: add run of testsuite (but leave it deactivated as I only tested on amd64) Checksums-Sha1: e54bb057c344711b256946101e18c1b950e02c36 2140 expat_2.2.6-2+deb10u5.dsc 87a4efb7434b84581e20b91e6dddbf1e8d32364a 8275473 expat_2.2.6.orig.tar.gz 2b3bbdd2f8330aea2a07485f1f12d07ea333a91a 28464 expat_2.2.6-2+deb10u5.debian.tar.xz 93b067af8b5cfd35fef77c5e082b1f4de40a3058 8669 expat_2.2.6-2+deb10u5_amd64.buildinfo Checksums-Sha256: 2eee1ea4da8668417e03851c3934773e7b39bacd3f2c4da35644a8b7f472b6da 2140 expat_2.2.6-2+deb10u5.dsc 574499cba22a599393e28d99ecfa1e7fc85be7d6651d543045244d5b561cb7ff 8275473 expat_2.2.6.orig.tar.gz 102e9c7195796b831942b8b380b6396906a49b54426c5082baea4602dd07ef4c 28464 expat_2.2.6-2+deb10u5.debian.tar.xz c9a23d7f05aab3c7db15364fd2cdd91283f1f8a840754b17ca7c307a0e907a41 8669 expat_2.2.6-2+deb10u5_amd64.buildinfo Files: 16be1e04fb8a3380acdf55f5f6cf01a6 2140 text optional expat_2.2.6-2+deb10u5.dsc b6ccd2705cf8e732707eb4132a1c4dbc 8275473 text optional expat_2.2.6.orig.tar.gz 7081000be2047287a5e2e7332ddf2690 28464 text optional expat_2.2.6-2+deb10u5.debian.tar.xz 934fb6b659f39f29108834261dfa47d6 8669 text optional expat_2.2.6-2+deb10u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmMvj7tfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR/aRD/4oM8clh5SWSCDN+PtgIz61y7zBfukl eU1nMWNawaTEwp32McttcJVUmNyFtk3johYZnOXQ5w9l1oYYOKNqdoKgXfncObAQ Tm9EU5cAhDXYg0iIIF1kfn3jtJadEwrfa9uaEt+Z5m5eSsiZmL28bQmHclA1OdRY X0PAPXIxI2q/WQTsoRnXyBx58BE/n6Us+QX+F5z5Ea36y+xbSgWewiyJLR86Sn1A 1vL2+sLHecMb9z7q6xKwRXRLVYB6zNMBtHZBXComEG7drSGZ6PSlL+tx1M4xtASi TEAfp29Cg9XSiUFyTPIHHWO9XFUtfv921//BHrERSoSqySQTEcjfAurF8+RRMt7k du20ziTQbrCL1KeafOgYuzxsOB3qOjjgrvKm1zOvWL7Vc+/1+CdGyzAP8UJF4lF9 UVF8WNqRK881j81CTdPm3qJVNNyMxVThv6jKg/gMm7uyCYMC0NAIHABC2LiXzsxO Gb7kTZeQPLtxfKbKd+IDy/mSrK14rPsQcJi9xx9CcugqOV4xv+i1mA7rbg2xc4Yj bVNBjI7vzBZZsnVaPI8LffZn8SOnjc7hCMUV3+mQKaJx0299fydaXDO9kTLT735I K6xwI6aaUS2opuDrpjvUbfSSZBAVigBEgadHE5ZFaZIQ10w+TOxZAu6ZjZjZibLF TFAUri8CcUr8LQ== =Mxg5 -----END PGP SIGNATURE-----