-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 24 Mar 2025 10:15:36 +0200 Source: libxslt Architecture: source Version: 1.1.34-4+deb11u2 Distribution: bullseye-security Urgency: medium Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org> Changed-By: Adrian Bunk <bunk@debian.org> Changes: libxslt (1.1.34-4+deb11u2) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2024-55549: Use-after-free related to excluded namespaces * CVE-2025-24855: Use-after-free of XPath context node Checksums-Sha1: 227fd368fb24df5802dbabe8fe7404e2b3da27e0 2407 libxslt_1.1.34-4+deb11u2.dsc 5b42a1166a1688207028e4a5e72090828dd2a61e 3552258 libxslt_1.1.34.orig.tar.gz 2c03db476a27bfbaa6194c8700007925945b7ed8 488 libxslt_1.1.34.orig.tar.gz.asc 8a71df5bb643aaa38c86eef8eb7ebc01b816a9da 24596 libxslt_1.1.34-4+deb11u2.debian.tar.xz Checksums-Sha256: 41720175b430f240bc2be2eabe444d012eeef747271f60b3566223703a0355d9 2407 libxslt_1.1.34-4+deb11u2.dsc 98b1bd46d6792925ad2dfe9a87452ea2adebf69dcb9919ffd55bf926a7f93f7f 3552258 libxslt_1.1.34.orig.tar.gz 673d1477552bdd5b0cc665704e77ca70e6be5d2f257e6a5a341c846719d747cf 488 libxslt_1.1.34.orig.tar.gz.asc 70ae56fdde7d16c96b16adbe224d6fc3b26de17716109f4ce853d1e204b20408 24596 libxslt_1.1.34-4+deb11u2.debian.tar.xz Files: a71aa700f22b3aab95b5462131c469a0 2407 text optional libxslt_1.1.34-4+deb11u2.dsc db8765c8d076f1b6caafd9f2542a304a 3552258 text optional libxslt_1.1.34.orig.tar.gz 0b982649f3a726af7f54312a2dba1e1d 488 text optional libxslt_1.1.34.orig.tar.gz.asc e5ad8e6b8ad512c9e8d71a46fb93f2f6 24596 text optional libxslt_1.1.34-4+deb11u2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEOvp1f6xuoR0v9F3wiNJCh6LYmLEFAmfhI24ACgkQiNJCh6LY mLG5Ow//SYcO+6J7yNn7OJlIpDBO3fwJwb2LrwM/9+e4CMFEwETUhWie8il0znZq AOcBJf2PyZ/AejaAvZLU/QGTJDCO7TCnEe33ihP5teld2JLsUBUIfYZCLGcmHcNp QBNU54wC6jwERSM/u7aO79ljPHFE3VQ0UsSG6fplp27sT9vJe31a9VmbfI2CROBz ECaVL6vmjNWUfRnIC+GfEJz0SXdctfDlvdD2/gC+eEVTcs0ti9RzB9lkafIHGw0H arrPAjct63cbEb3kJEkkT+yCdVboDVStumcszuEvvmpzlrLevXjDI0YNowSy24Pw eMGCOTk6doH89r2mj63X7FhGBRUZFjcvSYdpEJjtPqJGcqG6vo3Tx/liYoIxu+8J xTCYfGSYVNaXbGNWsfBwUeVvnI+Abt99raGbiw+XAMfSp5AUkFvDXWdl/D2USfPB PoyXpiphXkkj6BL9GuiOV5YSXSP8ubbWwKWw5JqlrLU8VNLNQ98yftlzP84U4PDV tqUymLK4qUgxGpsuHSeEUfCpreYQXlkbGS6pFOZwkkml+bxjedLJdBG0Tyc9xvsq PuHxndguOb9p/SIVQJ1SMcvUqbxydADE3KyX4qAjD9MqHnHouqBL4uWmyS3ScgJk 3ONH21qATqkXqvyUk/TO4UA+TkoycVaPBXdzMmBad8VwA0NlkKM= =2yCP -----END PGP SIGNATURE-----