-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Fri, 29 Jan 2010 12:08:29 +0100 Source: libxerces2-java Binary: libxerces2-java Architecture: source all Version: 2.8.1-1+etch1 Distribution: oldstable-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Giuseppe Iuculano <iuculano@debian.org> Description: libxerces2-java - Validating XML parser for Java with DOM level 3 support Closes: 548358 Changes: libxerces2-java (2.8.1-1+etch1) oldstable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fixed CVE-2009-2625: denial of service (infinite loop and application hang) via malformed XML input (Closes: #548358) Files: 755507a0cfcb7e2c83bb5c4a048295ec 908 libs optional libxerces2-java_2.8.1-1+etch1.dsc 737df086ccae96f77334974617ccb4e0 1691101 libs optional libxerces2-java_2.8.1.orig.tar.gz a28511449d840005ba690a19bb6898f0 9951 libs optional libxerces2-java_2.8.1-1+etch1.diff.gz 51c1bee829550381fccc419ae13d788e 1109884 libs optional libxerces2-java_2.8.1-1+etch1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEARECAAYFAktiw50ACgkQNxpp46476ap61QCgndJUFT0ec/RZDBJuJMJfaOEl AOcAnjycorK3Cl9AvyweBBeBXxQdeRRJ =5VK9 -----END PGP SIGNATURE----- Accepted: libxerces2-java_2.8.1-1+etch1.diff.gz to main/libx/libxerces2-java/libxerces2-java_2.8.1-1+etch1.diff.gz libxerces2-java_2.8.1-1+etch1.dsc to main/libx/libxerces2-java/libxerces2-java_2.8.1-1+etch1.dsc libxerces2-java_2.8.1-1+etch1_all.deb to main/libx/libxerces2-java/libxerces2-java_2.8.1-1+etch1_all.deb