Accepted: libxml2 2.6.31.dfsg-1ubuntu1 (source)
Matthias Klose
doko at ubuntu.com
Sat Feb 2 07:13:16 GMT 2008
Accepted:
OK: libxml2_2.6.31.dfsg.orig.tar.gz
OK: libxml2_2.6.31.dfsg-1ubuntu1.diff.gz
OK: libxml2_2.6.31.dfsg-1ubuntu1.dsc
-> Component: main Section: libs
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 29 Jan 2008 16:24:13 +0100
Source: libxml2
Binary: libxml2 libxml2-udeb libxml2-utils libxml2-dev libxml2-dbg libxml2-doc python-libxml2 python-libxml2-dbg
Architecture: source
Version: 2.6.31.dfsg-1ubuntu1
Distribution: hardy
Urgency: high
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Matthias Klose <doko at ubuntu.com>
Closes: 460292
Changes:
libxml2 (2.6.31.dfsg-1ubuntu1) hardy; urgency=low
.
* Merge with Debian; remaining changes:
- debian/rules: create a udeb for debian-installer, correct libxml2-dev
Depends to include zlib1g-dev.
- Build a python-libxml2-dbg package.
- Link using -Bsymbolic-functions.
.
libxml2 (2.6.31.dfsg-1) unstable; urgency=low
.
* New upstream release.
* Acknowledged NMU.
* testModule.c: Revert our change to add PATH_MAX for the Hurd, since we now
don't even build this file.
* debian/rules: bump shlibs to current version, since a new symbol was added.
* debian/libxml2.symbols: Reference the new symbol.
* autogen.sh: Switch to automake1.10 to follow upstream.
.
libxml2 (2.6.30.dfsg-3.1) unstable; urgency=high
.
* Non-maintainer upload by security team.
* This update addresses the following security issue:
- CVE-2007-6284: The xmlCurrentChar function allows context-dependent
attackers to cause a denial of service (infinite loop) via XML
containing invalid UTF-8 sequences (Closes: #460292).
Files:
056e01d4f1b70228f3e8e7252c6a405a 1060 libs optional libxml2_2.6.31.dfsg-1ubuntu1.dsc
8498d4e6f284d2f0a01560f089cb5a3e 3442959 libs optional libxml2_2.6.31.dfsg.orig.tar.gz
82744029683dea228978ed4886c17f0f 60178 libs optional libxml2_2.6.31.dfsg-1ubuntu1.diff.gz
Original-Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFHn0cdStlRaw+TLJwRAroVAKCOReXfyRhayL7+WddE6mx3028brACgmBi5
d+PrQGFJ2cFAkYF6csCLZps=
=X0b9
-----END PGP SIGNATURE-----
More information about the Hardy-changes
mailing list