-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 02 Nov 2026 20:17:03 +0100 Source: expat Architecture: source Version: 2.10.0-1 Distribution: unstable Urgency: high Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org> Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org> Closes: 1151840 1151841 1152337 1152343 Changes: expat (2.10.0-1) unstable; urgency=high . * New upstream release: - fixes CVE-2026-113351: denial of service with function XML_ParserReset() (closes: #1151840), - fixes CVE-2026-115506: denial of service from variations of billion laughs attacks and parameter laughs attacks (closes: #1151841), - fixes CVE-2026-117610: denial of service or more from issues with initial non-final empty subparser parse calls (closes: #1152343), - fixes CVE-2026-118370: signed integer overflow in function storeAtts() (closes: #1152337). Checksums-Sha1: f84b5bb7927827cd7457b0432193305554145eeb 1977 expat_2.10.0-1.dsc ba89468a7ff378547e4449f01f4ed9c9e5aed813 8498836 expat_2.10.0.orig.tar.gz 87d0bdefa71f11924c139dedeb45f2f35baf1b86 14472 expat_2.10.0-1.debian.tar.xz Checksums-Sha256: 8c4623c101959b8709a3f0a10c06a40d413dc7a6f5ffad3bc9d0cd010d850956 1977 expat_2.10.0-1.dsc b3644a12f62d7762b62c444f69d169ba0234f13138d0240244bca64cbe35286f 8498836 expat_2.10.0.orig.tar.gz 9be65c3ff79ca0508590970422de0a55f117bb7134a0274dd1ed3261f85631dc 14472 expat_2.10.0-1.debian.tar.xz Files: 694360ab2093130dbfc57545738bc495 1977 text optional expat_2.10.0-1.dsc 91ce483047fbcd40840e6250dca735da 8498836 text optional expat_2.10.0.orig.tar.gz 512e8ae90574c2031618b3a1e1cfadd2 14472 text optional expat_2.10.0-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmro5mYACgkQ3OMQ54ZM yL9w8g//YwTf5wvo0TwvmP2VqAwtrv65NGR7vXMM+hVJ6BATLcbDpXIQSG20AGBW XFlcd4VH60ahqiH1kqZ55bZ5FFgxrLDKDZWs/TRanLwYNRTdnmkpmjw5qkE6kwwn TmPLjbsnIjpX5nq8sb4WQNOsLCX8osHHLWExD7BsEcqMUfRBg2XyYPegFWVzuwTO +XSz2F5thcLIQIOqzjKUPjEZ12DGgTb16o5jW/FCOAfW2xtwAQ4PrSoBgC2s0p68 sthh2xwOsObv8Pn2/kP6r6rPhC00TNoCJ9FjOX9bdzyu6DGmKE3AWbcyjyfVokqg pklO8CURcQC8g93xBmTEbF9dhhNjKE5JvDPHxgU2ZzYVEmI8N5bE0/3E9t+/84h2 Rkc0QgVH9JiSCjqJ4VhgFxrIwPvp0wkbKoHN5243U9r2wJ1Ve7MBTAruEQ8cYosF DSxVNBD2Ff8WtytFfkFMib9OYQQIiJ025lLraVe/FORiigTDqmGgDavP+nt7mbTb u/puVAGg3hLG73Tg1NBCZjYYzR2HztmfBk7R0ncs+medblT3jPGKbRrG0dh/Rocc fb/faRZCanyWWeO+hmd60cD9sztEeAL6tfiQ2UGVmJLByjDCbWFS8byLCpXI+ImU fmI/grW/WFyBsyJDEcm3aJlWWWgWKYOB2eM6ZQLqZqjsyhs54mQ= =0OZ5 -----END PGP SIGNATURE-----
