Back to expat PTS page

Accepted expat 2.6.0-1 (source) into unstable



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 06 Feb 2024 22:00:26 +0100
Source: expat
Architecture: source
Version: 2.6.0-1
Distribution: unstable
Urgency: high
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Closes: 1063238 1063240
Changes:
 expat (2.6.0-1) unstable; urgency=high
 .
   * New upstream release:
     - fixes CVE-2023-52425: fix quadratic runtime issues with big tokens that
       can cause denial of service (closes: #1063238),
     - fixes CVE-2023-52426: fix billion laughs attacks for users compiling
       without XML_DTD defined (which is not common) (closes: #1063240).
Checksums-Sha1:
 68913585cf4c600408c97782d2559ef7af83d2ee 1964 expat_2.6.0-1.dsc
 6cd4f2cdafaa7f3176200542736c7d40c9438362 8414635 expat_2.6.0.orig.tar.gz
 4e5a46ceb154dcc24e724e2ba97a9161f2478706 12920 expat_2.6.0-1.debian.tar.xz
Checksums-Sha256:
 6473ff559f741ff08b95d3b3a8e16fab89a9b7e195215f23fe4eb19f353468d6 1964 expat_2.6.0-1.dsc
 87e35fde768baf3b31a78dd2807eb456618acf4d6c512660a1796c684b2515f9 8414635 expat_2.6.0.orig.tar.gz
 dd9d930c64e310b281ccab88d76babe8e6d67d0ea386d30fac66efd931e1173e 12920 expat_2.6.0-1.debian.tar.xz
Files:
 e0e9960787865ff4e36651e81b2e7b73 1964 text optional expat_2.6.0-1.dsc
 aa424e56fe6378bb4b9f26b903f42119 8414635 text optional expat_2.6.0.orig.tar.gz
 a679de87fc12b80d698a424c59180ed9 12920 text optional expat_2.6.0-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=jrTI
-----END PGP SIGNATURE-----