-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 05 Oct 2026 22:04:46 +0200
Source: expat
Architecture: source
Version: 2.9.0-1
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changes:
expat (2.9.0-1) unstable; urgency=high
.
* New upstream release:
- fixes CVE-2026-77214: validate parameter len against available buffer
capacity in XML_ParseBuffer(),
- fixes CVE-2026-102633: integer overflow in function expat_realloc()
on 32bit platforms.
* Update libexpat1 symbols.
Checksums-Sha1:
eefe91ce34a88026a1a7c8bfe08d990fa156890d 1970 expat_2.9.0-1.dsc
757c277106dfab05e1ad895d31ed63c82b438c04 8488503 expat_2.9.0.orig.tar.gz
9ea857818f1c38c4a718a740c954e35c725d3dc5 14360 expat_2.9.0-1.debian.tar.xz
Checksums-Sha256:
b5ad165baca0f2f2ac2a02b6b4b66d68ee890f582df398da9f86399679ca9c29 1970 expat_2.9.0-1.dsc
6e8ce7b52ebbaa423c59becc7cf1e6875c42e49228c062ac8123c10e700cec27 8488503 expat_2.9.0.orig.tar.gz
d23e632b05f10e269ee5426ff1ea962b4aec17fcd179c4dec14390a6793da764 14360 expat_2.9.0-1.debian.tar.xz
Files:
00f4d09ec86636b75a493ee8b7e0b327 1970 text optional expat_2.9.0-1.dsc
a33aef07840ad21397f99299e43b033a 8488503 text optional expat_2.9.0.orig.tar.gz
67c8f5330967623f6eac5700d04bd168 14360 text optional expat_2.9.0-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=80d2
-----END PGP SIGNATURE-----
