[ubuntu/intrepid-security] expat (delayed), expat 2.0.1-4ubuntu0.8.10.1 (Accepted)

Ubuntu Installer archive at ubuntu.com
Wed Jan 20 19:03:59 GMT 2010


expat (2.0.1-4ubuntu0.8.10.1) intrepid-security; urgency=low

  * SECURITY UPDATE: fix DoS via malformed XML
    - update lib/xmltok_impl.c to not access beyond end of input string
    - CVE-2009-2625
  * SECURITY UPDATE: fix DoS via malformed UTF-8 sequences
    - update lib/xmlparse.c to properly recognize the end of a token
    - CVE-2009-3560

Date: Tue, 19 Jan 2010 11:40:03 -0600
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/intrepid/+source/expat/2.0.1-4ubuntu0.8.10.1
-------------- next part --------------
Format: 1.8
Date: Tue, 19 Jan 2010 11:40:03 -0600
Source: expat
Binary: lib64expat1-dev lib64expat1 libexpat1-dev libexpat1 libexpat1-udeb expat
Architecture: source
Version: 2.0.1-4ubuntu0.8.10.1
Distribution: intrepid-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 expat      - XML parsing C library - example application
 lib64expat1 - XML parsing C library - runtime library (64bit)
 lib64expat1-dev - XML parsing C library - development kit (64bit)
 libexpat1  - XML parsing C library - runtime library
 libexpat1-dev - XML parsing C library - development kit
 libexpat1-udeb - XML parsing C library - runtime library (udeb)
Changes: 
 expat (2.0.1-4ubuntu0.8.10.1) intrepid-security; urgency=low
 .
   * SECURITY UPDATE: fix DoS via malformed XML
     - update lib/xmltok_impl.c to not access beyond end of input string
     - CVE-2009-2625
   * SECURITY UPDATE: fix DoS via malformed UTF-8 sequences
     - update lib/xmlparse.c to properly recognize the end of a token
     - CVE-2009-3560
Checksums-Sha1: 
 5f02500204ee1b5c9c9314092b81a86f0551b0dd 1557 expat_2.0.1-4ubuntu0.8.10.1.dsc
 c921e1f253029a32d1367e0527b8debf9e185e8a 133731 expat_2.0.1-4ubuntu0.8.10.1.diff.gz
Checksums-Sha256: 
 6d2637606a59e34630546fecd05dcb54f63ed1beae7a886da2bf63b8d73ae9e5 1557 expat_2.0.1-4ubuntu0.8.10.1.dsc
 41e91ebab60568120a2933c5ea91b2c3b670c3b55c0ef06d6d88918b4bd8a526 133731 expat_2.0.1-4ubuntu0.8.10.1.diff.gz
Files: 
 6b75538a9c085b86062315415272ec23 1557 text optional expat_2.0.1-4ubuntu0.8.10.1.dsc
 d45b701565fa3e69b1dd4124c8e805bc 133731 text optional expat_2.0.1-4ubuntu0.8.10.1.diff.gz
Original-Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs at lists.alioth.debian.org>


More information about the Intrepid-changes mailing list