-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 22 Sep 2026 06:48:48 +0200 Source: expat Architecture: source Version: 2.8.4-2 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Closes: 1148665 Changes: expat (2.8.4-2) unstable; urgency=high . * Backport upstream fixes for CVE-2026-93990: fails to validate low surrogates following high surrogates in UTF-16 input (closes: #1148665). Checksums-Sha1: 23aace7fbbc305b892865f21e965e18f1cc1bbbd 1970 expat_2.8.4-2.dsc 71217daa8963fd4ec3d556d9cf911b403372fdda 17272 expat_2.8.4-2.debian.tar.xz Checksums-Sha256: 85085c8874a3f9af59abd9d61d83a1f125e243d2209fd8156ad00fdf288c34d1 1970 expat_2.8.4-2.dsc 558110a1a2dab94b0807647d3f6a89f00c05ddb80f69a0b2c62a12cb385f44d8 17272 expat_2.8.4-2.debian.tar.xz Files: dc7b14ea20b57c7de16d28831cb579e8 1970 text optional expat_2.8.4-2.dsc 1432163a03e729254f9f0c2a9783f595 17272 text optional expat_2.8.4-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmqyCxEACgkQ3OMQ54ZM yL+gAw//XGekjmgg+NuDW8ajnQgHO+PR3N+yC0iz0sYW+BtnxXx7maxb7sXdM+Q5 ddsUzHW39GA7Hh1KClDyLEc1mRBZwWe9wCyAbX5w6Vms98pZ3qw4JgCFysSZ1cAo QdLi0e1TvsQxICDudSF6bv/U9eG8Zv34ylHZX1CwPs7twCPIgEBUepJ9U1Etlj7b lMv+6hPafiIvVDzTNZUOyktOFuRAKe1e7ys0SeD3LTneATqkkBQ/bLESRZcYYobA 5Ya7yHgLKYTmxtiyELXBC/aRrhGrbaPekpSpQq8DhK78qIpY7e5tf+imK8+jnHeS C57oxRVghAXH8w/3pugD2BWt9kzzykIMdzYbLafOavGZROK76fhJUgQMESSRoVO7 QVY7lm4BCo9DRE6qWdjCChEh3SZrBCKzPCMlfyH2DaqbO4qLTym31b3Ifyn/B4kz bHRA2oVGq7No4bh6qrKaNtwRv5AYx82zvnEZ0R2v0Vn8LqL1+lcQdSqw9SEDcLfd RJlf97yPB10vk5+9910TEiq7yAuSuNZCKR2fjTOIlryp5JrAJJu2LJ3zbmkTyjlW 6Xo2MWHbJlECcwmaBuVQe7cLUwNWFE71V9UBJGORfwYkOs82mf52CB76Z0DoE5Dx m2Uxu1axY7+d5DcFVAjngydgCXyE04IdEQioYwfq/ixGjEOYhW4= =GcEs -----END PGP SIGNATURE-----
