Ubuntu
libxmltok package

libxmltok 1.2-4ubuntu1 source package in Ubuntu

Changelog

libxmltok (1.2-4ubuntu1) kinetic; urgency=medium

  * SECURITY UPDATE: Incomplete validation of encoding
    - debian/patches/CVE-2022-25235-1.patch: remove the unused macro
      UTF8_GET_NAMING from xmltok/xmltok.c.
    - debian/patches/CVE-2022-25235-2.patch: add verification calls to
      IS_INVALID_CHAR() in CHECK_NAME_CASE, CHECK_NMSTRT_CASE and
      prologTok methods.
    - debian/patches/CVE-2022-25235-3.patch: add comments to BT_LEAD
      cases in xmltok/xmltok_impl.c.
    - CVE-2022-25235
  * SECURITY UPDATE: Namespace-separator insertions
    - debian/patches/CVE-2022-25236-1.patch: add a validation for
      nameSpaceSeparator in addBinding() in xmlparse/xmlparse.c.
    - debian/patches/CVE-2022-25236-2.patch: add a new method
      is_rfc3986_uri_char() to the previous validation in addBinding()
      in xmlparse/xmlparse.c.
    - CVE-2022-25236

 -- Rodrigo Figueiredo Zaiden <email address hidden>  Fri, 15 Jul 2022 10:32:03 -0300

Upload details

Uploaded by:
Rodrigo Figueiredo Zaiden
Sponsored by:
Marc Deslauriers
Uploaded to:
Kinetic
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Mantic release universe libs
Lunar release universe libs

Downloads

File Size SHA-256 Checksum
libxmltok_1.2.orig.tar.gz 63.2 KiB bbaf314ec559cda6329c24cfcf9c39173c74283c8d7b09b36e9f59d82fba9336
libxmltok_1.2-4ubuntu1.debian.tar.xz 8.6 KiB 73708f7404112b4e0667e11c767a39ff2d6e394035cf537ead74b84c6283fe45
libxmltok_1.2-4ubuntu1.dsc 1.9 KiB 2cadf9717d11b0ef8c19cef68c1d7db3c672872329ba55a3a7983c21f41c6ee4

View changes file

Binary packages built by this source

libxmltok1: No summary available for libxmltok1 in ubuntu kinetic.

No description available for libxmltok1 in ubuntu kinetic.

libxmltok1-dbgsym: No summary available for libxmltok1-dbgsym in ubuntu noble.

No description available for libxmltok1-dbgsym in ubuntu noble.

libxmltok1-dev: No summary available for libxmltok1-dev in ubuntu kinetic.

No description available for libxmltok1-dev in ubuntu kinetic.