Accepted libxml2 2.9.4+dfsg1-7+deb10u2 (source) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 11 Jun 2021 18:57:11 +0200
Source: libxml2
Architecture: source
Version: 2.9.4+dfsg1-7+deb10u2
Distribution: buster
Urgency: medium
Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 969529 987737 987738 987739 988123 988603
Changes:
libxml2 (2.9.4+dfsg1-7+deb10u2) buster; urgency=medium
.
* Non-maintainer upload.
* Fix out-of-bounds read with 'xmllint --htmlout' (CVE-2020-24977)
(Closes: #969529)
* Fix use-after-free with `xmllint --html --push` (CVE-2021-3516)
(Closes: #987739)
* Validate UTF8 in xmlEncodeEntities (CVE-2021-3517) (Closes: #987738)
* Fix user-after-free with `xmllint --xinclude --dropdtd` (CVE-2021-3518)
(Closes: #987737)
* Propagate error in xmlParseElementChildrenContentDeclPriv (CVE-2021-3537)
(Closes: #988123)
* Patch for security issue CVE-2021-3541 (Closes: #988603)
Checksums-Sha1:
e0ab02c6bd72fb80884e48f3ba3923e2b50b1826 3163 libxml2_2.9.4+dfsg1-7+deb10u2.dsc
31e832a9276ec98b3129ddcd9f0bf15bc93fb4ec 40924 libxml2_2.9.4+dfsg1-7+deb10u2.debian.tar.xz
Checksums-Sha256:
1a5189b5c4238d4d833ad7b18e56e23e50252b62dddc90b3aff67018bce1f3aa 3163 libxml2_2.9.4+dfsg1-7+deb10u2.dsc
07d0f31c11472f5a3407db92d363c30ad26100a11b5a181a6cf664af531f43fd 40924 libxml2_2.9.4+dfsg1-7+deb10u2.debian.tar.xz
Files:
1a213dcb74e4eaa253423defae3febb8 3163 libs optional libxml2_2.9.4+dfsg1-7+deb10u2.dsc
612a4ec53f88c5e53b5eef26fc419650 40924 libs optional libxml2_2.9.4+dfsg1-7+deb10u2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmDDlxxfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EHvUP/RlWf3ZpXBz3YSfm0botLNAKOJoltaDK
hpMv4wuwm2ZuXOx6iJ6uVYSG0l/2ybIatUEe0AS4wz3qfLiJpalHjUvRq8Rh6l4W
sAZV2HqVIpwmJo4LX23Mh0uX6Xwvx4Nt0aeJVCZnn3laVBeLjRZrDU9Kyw54OAUE
4GLpzCJ4Zn7iKIvN2nk8B4NkAdb2W4YShj/XuS8SD+uCkVogT353neQGWlE4Bm+5
WZjpV6+WHzrZvbrUkoeuQdLqRQ2n1FKZGbKA2wt2HXpoi+MzJOY3/7GiNvpg/ZLY
T1A7zOJ3GJPigI4J21XlTTM8PRMC3OJYGMU++0JTiOTdkLhC7Dd/DSGp3/KKyOIm
r84/zeNUz9RFQiRC3SC9e1slQOgc0kEC+SGP+U6pPFeEgI1+eZ2KAB7s4V1QLLo1
mSmNEfntlqCg7GMD9AERNiT9dCEQUe4loOb60bL3yMpMZ378QA4ALJTgTiqaWIib
pEgfqsdAuSaNIbQHTGQKRp6lIy8KY8bxvP4f+3ucm9fysWeCKp8r75WhfZ0Pcdi7
7KsXDW7aoAS/jJbxSJh9/mcDQ1mPLZFXrVOxNlGZBpTuaKC0tuMZZl2B5B8iT6o2
xyObzULaL6FdattI9fll4ajR4/HIxaSZ5ANA/63JaD5cjE0Yw9GVByDFSbxe5wU1
V0KjLyr7jLce
=S47g
-----END PGP SIGNATURE-----