[ubuntu/natty-security] raptor 1.4.21-2ubuntu0.1 (Accepted)
Jamie Strandboge
jamie at ubuntu.com
Mon Jun 18 15:34:28 UTC 2012
raptor (1.4.21-2ubuntu0.1) natty-security; urgency=low
* SECURITY UPDATE: Fix XML External Entity (XXE) attack
- debian/patches/02-CVE-2012-0037.patch: Enforce entity loading policy in
raptor_libxml_resolveEntity and raptor_libxml_getEntity by checking for
file URIs and network URIs.
- CVE-2012-0037
Date: Fri, 08 Jun 2012 11:27:50 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/raptor/1.4.21-2ubuntu0.1
-------------- next part --------------
Format: 1.8
Date: Fri, 08 Jun 2012 11:27:50 -0500
Source: raptor
Binary: libraptor1-dev libraptor1 raptor-utils libraptor1-doc libraptor1-dbg
Architecture: source
Version: 1.4.21-2ubuntu0.1
Distribution: natty-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description:
libraptor1 - Raptor RDF parser and serializer library
libraptor1-dbg - Raptor RDF parser and serializer library - debugging symbols
libraptor1-dev - Raptor RDF parser and serializer development libraries and header
libraptor1-doc - Documentation for the Raptor RDF parser and serializer library
raptor-utils - Raptor RDF parser and serializer utilities
Changes:
raptor (1.4.21-2ubuntu0.1) natty-security; urgency=low
.
* SECURITY UPDATE: Fix XML External Entity (XXE) attack
- debian/patches/02-CVE-2012-0037.patch: Enforce entity loading policy in
raptor_libxml_resolveEntity and raptor_libxml_getEntity by checking for
file URIs and network URIs.
- CVE-2012-0037
Checksums-Sha1:
f6bee192e046f9509d8c8b74b99823c12d5891c0 1911 raptor_1.4.21-2ubuntu0.1.dsc
aeaf2022e3ebb9313b14e80d005d3097187a80c6 9696 raptor_1.4.21-2ubuntu0.1.diff.gz
Checksums-Sha256:
30f419865da683bd2e54e58f5232694991fcda84739a4c9c36897c04413b2d52 1911 raptor_1.4.21-2ubuntu0.1.dsc
b27e38ba9d4dce3c95b220c754ed82b64dc5eae7346ebbd63db785dd05f67770 9696 raptor_1.4.21-2ubuntu0.1.diff.gz
Files:
3557e4b4d838b395b7fbf7993a366b83 1911 devel optional raptor_1.4.21-2ubuntu0.1.dsc
01eedd98414eabd211f5234f9dddecf4 9696 devel optional raptor_1.4.21-2ubuntu0.1.diff.gz
Original-Maintainer: Dave Beckett <dajobe at debian.org>
More information about the Natty-changes
mailing list