-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Sep 2024 08:44:19 +0200 Source: expat Architecture: source Version: 2.5.0-1+deb12u1 Distribution: bookworm-security Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Closes: 1080149 1080150 1080152 Changes: expat (2.5.0-1+deb12u1) bookworm-security; urgency=medium . * Backport security fix for CVE-2024-45490: reject negative len for XML_ParseBuffer() (closes: #1080149). * Backport security fix for CVE-2024-45491: detect integer overflow in dtdCopy() (closes: #1080150). * Backport security fix for CVE-2024-45492: detect integer overflow in function nextScaffoldPart() (closes: #1080152). Checksums-Sha1: a090f14a8bbb40759949fd4f00db7aedbbf4b8d8 2013 expat_2.5.0-1+deb12u1.dsc 03d9882ede56aa48919fbf50fe17614630257a82 8320988 expat_2.5.0.orig.tar.gz 1d6311c2981fcb0425efbba1cb5417905fbac3fe 13724 expat_2.5.0-1+deb12u1.debian.tar.xz 25416e403e0c246a662c691a92f20a7d670c3c8f 9004 expat_2.5.0-1+deb12u1_amd64.buildinfo Checksums-Sha256: 6507e647ff25e88be44b413089b357b4a837a461f11353dd38d7686e3e5733a4 2013 expat_2.5.0-1+deb12u1.dsc ab00ee05c7067fd10a35c5d2a4922ebba746ddd50ff83b79c828da17bbdf1757 8320988 expat_2.5.0.orig.tar.gz 32e9a953f5a240fca186e077ca957fe9352777707b650a58ff989650b9fa0a80 13724 expat_2.5.0-1+deb12u1.debian.tar.xz 510a44ed4b4de580aab5b4035ee2f708986a09bf1c826984ab01bf68a90f2a18 9004 expat_2.5.0-1+deb12u1_amd64.buildinfo Files: 293b800314254ac85eaaa734eb21c3e1 2013 text optional expat_2.5.0-1+deb12u1.dsc d375fa3571c0abb945873f5061a8f2e2 8320988 text optional expat_2.5.0.orig.tar.gz df8f2ce3e9ef757f1b1799b7ce326488 13724 text optional expat_2.5.0-1+deb12u1.debian.tar.xz b320d197550f5aa1d3bfdf2da6bdca90 9004 text optional expat_2.5.0-1+deb12u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmblRLgACgkQ3OMQ54ZM yL/DGhAAms5NIjOKNnyPzYqBY1UbBPfY1ft6SHMGWV1Rrz1IHsU3mT0Rf2M3r/UI 5K08HgAh9hrd7E607eLvW8oJNYEQbzZ62yTGuVfzDvON1OhBJDhgbaOkB2qaFrmi 2vVvhp2k6ALHXpoG+dGIoEFNWKLNQQa9TirkEgBG/vfx5SLhLkYDuB/6lO7XFl0P drEz+i9caf2JMHC4tHm7yQ2y4YACKiJt5bXKExxNe/Yprt98xHIapmzauY53Uudf RUOX9tdskLAtpWsoPHxY4GTBrvDuJxDVY+Xs4Pu1HHBwZSaywi3iWTRfq8AN4PrE YykGtHMMOaM1i1QhWkcJ4ZxjYncXm0SxXMQFkkoNjq55p1Wkf0glARtRUBtAGcLV v8X+MR4Cpq2YVZaj8RhF53LIaZxTSztZk0pKSjO65ks93Ikxi57HJXgaAdagcqIk jVW66FG1eyseur2rHkYoR/jiLEKWsHyV5AAIFrmKfquimsrvcZ0IMkm2/cdPPdd8 j4m6xgJB/tWbYGGjJAuPCRRFIzR7C/149Ja6qSgQFXdcrpcr/QtRsUy2k8OuMwFe JplYx3dtAXD5Emlmff8a/ySYDc07g04fslukD+jpjtA6fKUY9CB24m2TdOfij0T0 pF6VzSUEk2WGrWCiWqUNO+gxdiIvF17/4yiwQu43NS1X0FfYOCw= =deJw -----END PGP SIGNATURE-----
