Format: 1.8
Date: Sat, 19 Feb 2022 07:34:25 +0100
Source: expat
Binary: expat libexpat1 libexpat1-dev
Built-For-Profiles: noudeb
Architecture: armhf
Version: 2.4.5-1
Distribution: jammy-proposed
Urgency: high
Maintainer: Launchpad Build Daemon <buildd@bos02-arm64-054.buildd>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 expat      - XML parsing C library - example application
 libexpat1  - XML parsing C library - runtime library
 libexpat1-dev - XML parsing C library - development kit
Closes: 1005894 1005895
Changes:
 expat (2.4.5-1) unstable; urgency=high
 .
   * New upstream release:
     - fixes CVE-2022-25235: certain validation of encoding, such as checks
       for whether a UTF-8 character is valid can cause code execution
       (closes: #1005894),
     - fixes CVE-2022-25236: passing namespace separator characters can cause
       code execution (closes: #1005895),
     - fixes CVE-2022-25313: an attacker can trigger stack exhaustion in
       build_model via a large nesting depth in the DTD element,
     - fixes CVE-2022-25314: integer overflow in function copyString() ,
     - fixes CVE-2022-25315: integer overflow in function storeRawNames() .
Checksums-Sha1:
 50bd8e6450c95225f0c2ec95005aaf564a1ba20a 32358 expat-dbgsym_2.4.5-1_armhf.ddeb
 8a79d6f4af073b392ce9675e6b8f2814bc076f0d 7754 expat_2.4.5-1_armhf.buildinfo
 75d9b5204eece91a6cf604aec007dcaca56362c9 16158 expat_2.4.5-1_armhf.deb
 53341a26187503b73212e1b17623d58dacd25abd 318962 libexpat1-dbgsym_2.4.5-1_armhf.ddeb
 4021063dc8443dd19ffee1a203ecfe209d054ea7 127498 libexpat1-dev_2.4.5-1_armhf.deb
 6ad9b217a637cfe1a73dc9d0b76ada90891ecd65 68526 libexpat1_2.4.5-1_armhf.deb
Checksums-Sha256:
 d42636f622c1c835e8ffee6910ffba7abb8a39d762c3bf6ed798711738f50210 32358 expat-dbgsym_2.4.5-1_armhf.ddeb
 f165b0a918aaf45089a82b505516c27f10d3ac2b1ad891fab401f2037d2dec67 7754 expat_2.4.5-1_armhf.buildinfo
 c21e97b3a08933e7d44963b7d68331aa0cdcda162a855834cd3d68f3bf591a84 16158 expat_2.4.5-1_armhf.deb
 cd315951b232764929cf29a3cccfe57c817f853a841e26cd2572aac3e284d6b3 318962 libexpat1-dbgsym_2.4.5-1_armhf.ddeb
 96c69bf908f85072276ae3ecf7442bdb7490d83906f0881986b19f0c5a146fd5 127498 libexpat1-dev_2.4.5-1_armhf.deb
 9ef2131617cc4abaa06e302fb861f6046e9e13851b939cdfc722cd36b8c803c9 68526 libexpat1_2.4.5-1_armhf.deb
Files:
 f80684938fe2b7eaaedd49be88696b8c 32358 debug optional expat-dbgsym_2.4.5-1_armhf.ddeb
 193e7486a445d9b9a65605e4e15b842b 7754 text optional expat_2.4.5-1_armhf.buildinfo
 da0d8533a42f60c5f6b689909459a43a 16158 text optional expat_2.4.5-1_armhf.deb
 bd2e4cff81fd38152ad259facc30a40e 318962 debug optional libexpat1-dbgsym_2.4.5-1_armhf.ddeb
 5578bba1c82a2fd276b4042d7a40ba97 127498 libdevel optional libexpat1-dev_2.4.5-1_armhf.deb
 613128c6993dd8aeac3ddec0b8552d1b 68526 libs optional libexpat1_2.4.5-1_armhf.deb