-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 25 Mar 2013 23:52:58 +0000 Source: libxml2 Binary: libxml2 libxml2-utils libxml2-dev libxml2-dbg libxml2-doc python-libxml2 python-libxml2-dbg Architecture: source amd64 all Version: 2.7.8.dfsg-2+squeeze7 Distribution: stable-security Urgency: high Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org> Changed-By: Michael Gilbert <mgilbert@debian.org> Description: libxml2 - GNOME XML library libxml2-dbg - Debugging symbols for the GNOME XML library libxml2-dev - Development files for the GNOME XML library libxml2-doc - Documentation for the GNOME XML library libxml2-utils - XML utilities python-libxml2 - Python bindings for the GNOME XML library python-libxml2-dbg - Python bindings for the GNOME XML library (debug extension) Closes: 702260 Changes: libxml2 (2.7.8.dfsg-2+squeeze7) stable-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix cve-2013-0338 and cve-2013-0339: large memory consuption issues when performing string substition during entity expansion (closes: #702260). Checksums-Sha1: d5ea490fbd5d6b9bcd8a1c7ce014b9fe17ab59df 2888 libxml2_2.7.8.dfsg-2+squeeze7.dsc dc017c3621a681d6872f4ea8bb1a23939d8839e9 119263 libxml2_2.7.8.dfsg-2+squeeze7.diff.gz e66ae1c5cff7258a792c10aa6ea44a3b97b65b3f 874206 libxml2_2.7.8.dfsg-2+squeeze7_amd64.deb 114ab135376cdcd59784808aee3a295984f14abb 94050 libxml2-utils_2.7.8.dfsg-2+squeeze7_amd64.deb 9038504b9f072eae6aeec9bbebd3da12198a17f4 831920 libxml2-dev_2.7.8.dfsg-2+squeeze7_amd64.deb 11d46643e1d890e47334889b3a3406434dd953f2 988858 libxml2-dbg_2.7.8.dfsg-2+squeeze7_amd64.deb 2d35b7f809cb5e0ae900517d0770e898876a0d81 1373016 libxml2-doc_2.7.8.dfsg-2+squeeze7_all.deb 06a12590126c21d83faa90a50c1580d06d649682 339894 python-libxml2_2.7.8.dfsg-2+squeeze7_amd64.deb 5696aa5aa901f9b4b497d346618ad499f0198836 870040 python-libxml2-dbg_2.7.8.dfsg-2+squeeze7_amd64.deb Checksums-Sha256: 2f546ef13b636a87d5643c308cc4df8f3bba3752437ef46eee0b1a6de8644095 2888 libxml2_2.7.8.dfsg-2+squeeze7.dsc fc6572b2482f5ab08dbd12c0458d59c3deca98965575dd1f615f2112402a14dc 119263 libxml2_2.7.8.dfsg-2+squeeze7.diff.gz 61a1c91a87cbf559c5f7b479f5a51741802d5823d145f5da836f2de9ce7676a1 874206 libxml2_2.7.8.dfsg-2+squeeze7_amd64.deb 53c6fee546feec9cf76e8cd12e4dba95aeefc34f6e24c753b44fc32646f37c24 94050 libxml2-utils_2.7.8.dfsg-2+squeeze7_amd64.deb c19ecf32ff09beebf95564897ee947f4d4cda35a768629b77758967b1cf9dad7 831920 libxml2-dev_2.7.8.dfsg-2+squeeze7_amd64.deb b7e31ee9cb51ea02151207f6d599b89760bc3782e0176f9b5959f99e65977a6b 988858 libxml2-dbg_2.7.8.dfsg-2+squeeze7_amd64.deb 96072a933869c80e99facb39a7f38e4e9c390fd605dcd1aaa3db23be35233a60 1373016 libxml2-doc_2.7.8.dfsg-2+squeeze7_all.deb 32b22ddbd9f9f6ed16e2bf5dea45a6f389d8f4a8f3a9e9538ab1074f06244a4a 339894 python-libxml2_2.7.8.dfsg-2+squeeze7_amd64.deb 497021e00e09333c573d10881f292e8c0a7618a73cff739d8b47c32d75aa5f18 870040 python-libxml2-dbg_2.7.8.dfsg-2+squeeze7_amd64.deb Files: 595067fbabf7626fd9ee9aebd8155949 2888 libs optional libxml2_2.7.8.dfsg-2+squeeze7.dsc a6c87ea23856e58ff5ab168cc599d4ba 119263 libs optional libxml2_2.7.8.dfsg-2+squeeze7.diff.gz 364e0ae82394aa0276c2030488a991d7 874206 libs standard libxml2_2.7.8.dfsg-2+squeeze7_amd64.deb e7a5506f849522716c4d863e40c95772 94050 text optional libxml2-utils_2.7.8.dfsg-2+squeeze7_amd64.deb 7f2b45da2f53a9fc32606d9125a42183 831920 libdevel optional libxml2-dev_2.7.8.dfsg-2+squeeze7_amd64.deb 9805c73242bb5775c9b9aaeb9e200a26 988858 debug extra libxml2-dbg_2.7.8.dfsg-2+squeeze7_amd64.deb 059e526c43a67ab58d452858bb3320a1 1373016 doc optional libxml2-doc_2.7.8.dfsg-2+squeeze7_all.deb 9917c0ea043e7a6ab215278769604c52 339894 python optional python-libxml2_2.7.8.dfsg-2+squeeze7_amd64.deb 4e0f4e65df47d8943ae9be3c4a57c36d 870040 debug extra python-libxml2-dbg_2.7.8.dfsg-2+squeeze7_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQQcBAEBCAAGBQJRUOWcAAoJELjWss0C1vRzbnIgALDlX4N+Ayu6IwM3DHykVwdu GA8IRF5simG3fHFb7CEw2BZY021PuiHAvyvu8L+uOBlMczYX7v+5bRqKfCsatFbb 6nHDCkX7dKOZL3AIpMy48XuG4ACtctAL4F3skATcTi6okyyAssXnYMdjaKgc8G/Z K/BfTizIOXl6qEaoI020mBG/wRJjb2Z8RLaym1t6AMq4LjVne63fK35HyFPtQbfL 5Z6VG5d8SXW5DmkvElWQYmpqNV5/V30z1zwsZBsvVPlJszxgK6V20pj+eJ6aiLDL Gqjh30Gy5rr0sq9F1wGlN52Dd1wFo+NzSuO8JUvdekdaow+4h7h+FD8g4op7eHlf ZWB5Pe05FRh/Qk7j/mns2DHZqeAIbx5zBW87zKw/u+JwiJfr+6oNWDPanZH/5Z6B XoF4Cu23CHio+LQo57IChc8Cr5XBTTS6fAv6NzwNe53crh5CO0r6sYsb1oROFxe/ EgyFzE0k3sRi0HOdIsJ39LO+XvDadzehfCs+46YD6Ltni601XdIJLqvCnCPWWXj7 CXoVF/WNP8sLjSzUSbvBiY0Sz7oKIebNq+GYMsZUgFIpYAVpMv05HYFEtvIOpDhX 4bPxjYHZkKehHnstwoax2iKJ0n0AU+jZ7DrLPeCNCp04Nc9G+ctYW0daw/rkqI+f 6J7rfJfK21eMl8l01pLEgG7Hm9afEPkPZdoS6P/I3RPs3GPSsch+9WFJhSAMJcL4 /PRLRmgNNmXK3Cbm7/Fxr9AUywKwOFSZp8jPpObi5N/azRHJ/J6QHr1JmJYaHCfm 5B6s94LpMabiuD8Q7GhuqWfi9lSoYr7Bg5ov2AkfnaoZAViEQib+2g7V4tMOWxFl 6OSkBkqjjFo6+Xjy6IVt8MsFqbXokFl/vqLhN7Er/traFlXIBRCN4dEYmC3uDqbH 26uvct8BASAkJ7plTDC0/rO+czVEfNfyDD0Bqc4+A0M13OdAtrB/eth9pyvIgtZ1 a89ymiDqB/mYTWn/4sB0lflsTMd8H8VG9Y+VUhXPCCxL3Lmqsnr1LFAjUsHyJ7RF vnak4ZilgxdD2Fv88OjTLEtYAHFvh0M0l+goVWlQoPSKFR2D/8aocU5oOuIo2Aon UYIffR5gagOADgLQVpolVxd6PZA7EapC0Q6MxM5e+gM6+Rs1UvL7OFTakxhHZTri oyXgcQBFA55NAigKxgDt0I8pnG/0QmjiKIHDMKq3Yrr3cVk7g8FNR5QijkRyAb7s iiVC0H7KvnDcKL5N0jVzCGqeOsSDVFegejHDLHiHlVthZ3WGVdI1eRNMoNmBklK2 LNkm5c0k/yund5qLM76T1MCxtQ012YSR7liJqv5f9LIYyFiF8MNwD9qhGi/k1dU= =JgZ9 -----END PGP SIGNATURE-----