-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Sep 2026 16:38:52 +0200 Source: expat Architecture: source Version: 2.8.5-2 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Closes: 1149507 Changes: expat (2.8.5-2) unstable; urgency=high . * Backport upstream fixes for CVE-2026-102633: replace assert with runtime overflow check in expat_realloc (closes: #1149507). Checksums-Sha1: b8759af9dc461ea300df57779c9a8863caa2edca 1970 expat_2.8.5-2.dsc 45bf4a9a1b04743425c7d83fac61747905e0305f 15168 expat_2.8.5-2.debian.tar.xz Checksums-Sha256: 1093b599a1245827eca68383371a3b3a1991fd3c7f9537506e4e557a3c0523d4 1970 expat_2.8.5-2.dsc 1c4354bc84ba14b4269e72e41192655c1d0df48a661c6362d4349e0133ee67a5 15168 expat_2.8.5-2.debian.tar.xz Files: b37f4f5c55fc5bc9b60361b097c68e46 1970 text optional expat_2.8.5-2.dsc 73b388d08f40e4909673d55ed1af038d 15168 text optional expat_2.8.5-2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmq9IjAACgkQ3OMQ54ZM yL+/yw//ddf79Ga86AIJV+JDM5h8vbvbFJViAItvrIsNFOHphejtJUySzDPAJvGu du+QcM1nyrC3hh8n0BY05bk87DZbVC2zuF0GQWwx0ADbjkElQ758Z0VrgcWUr4Ov 9VmY3txnGzGbT52drsrF6k9eIM0gMIGBA9GWZH9coxKiNfEALGhdEXXNgrGUJ2PU BbUWwKHNGtxdpGoc8bxO1gYw9CsGws6yCSi70dh3/qtj6Nv9ZfRFBg2u9L9PYpan 3f6KmQUqgvNw+oRInK6EFDmZjQV9YPPBwmsC/eKNbRQhmzJ+9Nirg1fCmAHOOTd2 cRpxp0kJZpMuAZ4PkeM64rOihxohQJrQ/1h3RnwwkJ/IABxmp0OH00JmKZA2wA2F wHCQaXsWjd/zcYnFpce1fsqCzPLMWKi8L563heJSnXEvu/IKVjeEqQy8AWc/MD9C Xixf1r/rD0acjKC0eNkqfKdJ6wd3l2b13re69PR33qlzCHGh71WsSclgbQNFTqMK yMpMMiRizSnDZkh/PuxeS5fgWpTmBiTI7944QNMD3gaIokfyUvama7P+OKzqXrJC qeQoYirtn1s5Ezj/JWeGVWyzaSli6mQdhCvrmQqooQIbf3xB/pA5fNdKU1EzlYeN cgQ9OlSl3+4p+SaCEY4jxUKbMGYTf/mkfMA3N5eyE4ji/SMSGE4= =3rMz -----END PGP SIGNATURE-----
