-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 18 Nov 2017 09:16:17 +0100 Source: libxml-libxml-perl Binary: libxml-libxml-perl Architecture: source Version: 2.0128+dfsg-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 866676 Description: libxml-libxml-perl - Perl interface to the libxml2 library Changes: libxml-libxml-perl (2.0128+dfsg-1+deb9u1) stretch-security; urgency=high . * Team upload. * CVE-2017-10672: Use-after-free by controlling the arguments to a replaceChild call (Closes: #866676) Checksums-Sha1: 0a4403d0df991228b4adbb756514044dcdbb4b71 2500 libxml-libxml-perl_2.0128+dfsg-1+deb9u1.dsc ef0a0c31f71e50109cf9e459edf9db79ba587a01 402453 libxml-libxml-perl_2.0128+dfsg.orig.tar.gz 82e3c055c743dfc886871285dbc6b9d8f1f738e2 12152 libxml-libxml-perl_2.0128+dfsg-1+deb9u1.debian.tar.xz Checksums-Sha256: 85e95fe670faeae8193e0d2490b637280488aa7caa82ed61707117fde73edce1 2500 libxml-libxml-perl_2.0128+dfsg-1+deb9u1.dsc 6c2aaeb77669f2de7a167d320233f9626002e4c6de06145edbe76d5e280e5e5a 402453 libxml-libxml-perl_2.0128+dfsg.orig.tar.gz 03aee0b82f700595e2b05e36ce4ebe55542e23e21c2ee23225d1728ec7fb0964 12152 libxml-libxml-perl_2.0128+dfsg-1+deb9u1.debian.tar.xz Files: 03b661a7d12134ede3100cb1378ca254 2500 perl optional libxml-libxml-perl_2.0128+dfsg-1+deb9u1.dsc c0887cdb42acb06324e01e71704b521f 402453 perl optional libxml-libxml-perl_2.0128+dfsg.orig.tar.gz 2b8205203be1ad2535dd176e42b80316 12152 perl optional libxml-libxml-perl_2.0128+dfsg-1+deb9u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAloP7O1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EqFMP/R9VrZTOmKI8txvYxySywPUIvePCQXN/ DJD9iDrvP19KWCuCBcqj0/WzQbFh4ioVl6iDrEuU1o5FAw2X8lkHWm6Mes9+dwZj IUOakJifVYG0n4g/CYVdfbSJPc4N7T7BZ8A+aUYoYWYID9qsM6ckwLp1jhgthxMR D9bSnktgtdZ+nGYDIXHUkm9OYb0NAH4ps5aUS2pZDEvzixCuZvDUgs4E3nyucLx6 LnowU4U1M63+umvcQJAZgkkkLHfKeLPkAEfcIcJPDFpRs7YIa9awkIvB7A/EKpT/ /HSkmXizCG/UmcCKCNsvimB5IM81tffayLXlwT+hjAyBh6p/VI3Jcf+10uuI4Wmp TYUjq7R3/KyOPGqGDeKXf8jQGC0OM1rS3xN1+2Z2iMsnrgD2Fo8jEt5j3RsHy18A HS0MT9pAPERJQ94RBUSROanYYQFvdWuVFgUyan+60e1qifF5c8CbYGRWk4dcLRqr K0HxtIvAm3TXoD4vBqrH+A0nIYlLWez2QhKus2W3LAghThMpY7K1et2DEpWjXlPX VThL8Uou5tTFNCHyUj2IylunQqCth45uNR/D2ZyZdWVTEyNRge/gIIsS67ZmCxD/ QaK/J6vKW3lIl/cmM1o5T9BTwwuGgzpOgpEKsxXc3OeEDKb77Ho1uHtvu3qHGRLk buXhXPupxov5 =NH/n -----END PGP SIGNATURE-----