-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 28 Oct 2022 17:29:19 +0200 Source: expat Architecture: source Version: 2.2.10-2+deb11u5 Distribution: bullseye-security Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1022743 Changes: expat (2.2.10-2+deb11u5) bullseye-security; urgency=high . * Non-maintainer upload by the Security Team. * lib: Fix overeager DTD destruction in XML_ExternalEntityParserCreate (CVE-2022-43680) (Closes: #1022743) * tests: Cover overeager DTD destruction in XML_ExternalEntityParserCreate Package-Type: udeb Checksums-Sha1: 5b8703fefe439b5fe58e351366588a14eec82757 2175 expat_2.2.10-2+deb11u5.dsc 8bbd0e3d1521f2fd6b35d3bfa7540c79555dd5f8 29468 expat_2.2.10-2+deb11u5.debian.tar.xz Checksums-Sha256: 5bbf7d1df4aa4fb5d31141b58dc08a687918c1685c48300bc3f67a8f56fe3071 2175 expat_2.2.10-2+deb11u5.dsc b24f586a155c207b2dbf6db1b6e4106427150acdd3a654c00c52d400da70d23d 29468 expat_2.2.10-2+deb11u5.debian.tar.xz Files: 7c7d6373f7b64c8a059da4121ff0ebdc 2175 text optional expat_2.2.10-2+deb11u5.dsc c468b444fecb0fd0ecd17df9cc7b0506 29468 text optional expat_2.2.10-2+deb11u5.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmNb98lfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EJ0kP/iihv2DkcnpAJawqaXh7UQs8SBCyGbmf CVdvnZLd7xi3biWIMEw5r03jnr/NTMNwgEXhKY/2TdnxZ6TFKS0qS6Wj8de8UDam jNnSHK6q2q8G+m9cyBRvo0t0Wf5be6nzZZJcrqSn4zE9Ua9rbL2Az+lx1ACPfmmg QEgTjmwmu7tV+b5Gy66E0glEsKxgS5lxPtHM1dk4qkpN4QaUhBORhnkTYD6sDL4H K2Hy6PgsUENW7prwPo5uuD0Glr8f60oSdpPr5QI1zrSsju7TeQSgxb9RqfHxyJsb VSha62E/3YdWZlfKQOTA7bBdVzSecDkEynL3OPJa5PVVnnf5sEiDzCL2qI3sTtsf gPBs0kmxY2a9JwFozGCKEUntLCLVETngJJkWKzO0I64mvdLO4U9PsuijwmLkvizT x5WAqBRwM3bH/xebcov9kKXbufEyS/u2QfhpQr70UWn+FtpeQTmy4ZuYtVibHbxX +51IZZYNzQdGEestc6Uli+fsCnog7ymkzI2GrmEYuEV5kIFpxL4Mwgfy/IpMQ4Zw gBU+jxhnyx0iN7wdK+eBBO42euzphiWB1QHcnAZJcbVP7frHd2Mi96xPWF2vdfcU GwlIsgrV+c79PPb7jzWFn6K6Lfb7D2G77iuf7L9h/T89/D8Y+ZloyhqMfhCXTwX7 ZOSIiL526cqx =gPzU -----END PGP SIGNATURE-----
