Format: 1.8 Date: Tue, 14 Mar 2017 16:06:13 -0400 Source: libxml2 Binary: libxml2 libxml2-utils libxml2-utils-dbg libxml2-dev libxml2-dbg libxml2-doc python-libxml2 python-libxml2-dbg libxml2-udeb Architecture: s390x Version: 2.9.3+dfsg1-1ubuntu0.2 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: libxml2 - GNOME XML library libxml2-dbg - Debugging symbols for the GNOME XML library libxml2-dev - Development files for the GNOME XML library libxml2-doc - Documentation for the GNOME XML library libxml2-udeb - GNOME XML library - minimal runtime (udeb) libxml2-utils - XML utilities libxml2-utils-dbg - XML utilities (debug extension) python-libxml2 - Python bindings for the GNOME XML library python-libxml2-dbg - Python bindings for the GNOME XML library (debug extension) Launchpad-Bugs-Fixed: 1652325 Changes: libxml2 (2.9.3+dfsg1-1ubuntu0.2) xenial-security; urgency=medium . * SECURITY UPDATE: format string vulnerabilities - debian/patches/CVE-2016-4448-1.patch: fix format string warnings in HTMLparser.c, SAX2.c, catalog.c, configure.ac, debugXML.c, encoding.c, entities.c, error.c, include/libxml/parserInternals.h, include/libxml/xmlerror.h, include/libxml/xmlstring.h, libxml.h, parser.c, parserInternals.c, relaxng.c, schematron.c, testModule.c, valid.c, xinclude.c, xmlIO.c, xmllint.c, xmlreader.c, xmlschemas.c, xmlstring.c, xmlwriter.c, xpath.c, xpointer.c. - debian/patches/CVE-2016-4448-2.patch: fix format string warnings in libxml.h, relaxng.c, xmlschemas.c, xmlstring.c. - debian/libxml2.symbols: added new symbol. - CVE-2016-4448 * SECURITY UPDATE: use-after-free via namespace nodes in XPointer ranges - debian/patches/CVE-2016-4658.patch: disallow namespace nodes in XPointer ranges in xpointer.c. - CVE-2016-4658 * SECURITY UPDATE: use-after-free in XPointer range-to function - debian/patches/CVE-2016-5131-1.patch: fix XPointer paths beginning with range-to in xpath.c, xpointer.c. - debian/patches/CVE-2016-5131-2.patch: fix comparison with root node in xmlXPathCmpNodes in xpath.c. - CVE-2016-5131 * debian/patches/lp1652325.patch: XML push parser fails with bogus UTF-8 encoding error when multi-byte character in large CDATA section is split across buffer (LP: #1652325) Checksums-Sha1: 30d99011153a57976dc267ee808882e0fb30617c 1792316 libxml2-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 707cac127d0f426b663d409305e87312df59111a 1060 libxml2-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 21285774830dbd4abc2e6603fd6efb8eecdd2ec5 1060 libxml2-dev-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 7819fd773bfbe4d16ede351f3f3659229614d5fb 701692 libxml2-dev_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 10fb2cf76aa71729c722cb7d7a937806af1e3910 1050 libxml2-udeb-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb f1a9ce6e09a5fdc60b5716be43da2670cbfd066a 577558 libxml2-udeb_2.9.3+dfsg1-1ubuntu0.2_s390x.udeb fb07a7a74f2f73cb90d9c12f5947d9308b030244 72176 libxml2-utils-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 64dec4da93d5507bb9e6c646c72a2b54a6898f37 1086 libxml2-utils-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 901f6d2859465f9060002f35f6306b72f1395d20 34190 libxml2-utils_2.9.3+dfsg1-1ubuntu0.2_s390x.deb dd73bd385118cb0c762ba49eefc5d66744325ad5 641920 libxml2_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 652d7f345791705243a6c4b9c44444213ef8919a 251312 python-libxml2-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 13326a9276e3cbd989ca70e0e918153089e972b2 139672 python-libxml2_2.9.3+dfsg1-1ubuntu0.2_s390x.deb Checksums-Sha256: df8b48fd36408d0f44afc300fec80d1c77870971c792f2e001094836f484dfc9 1792316 libxml2-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb c1a2f04f1f326e34c325f509d7ea47cf4daa76fef68c78341b4715c6a1750499 1060 libxml2-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 0eb0b00ed0bfa500d310fbaf73de985764c1962fb125916f935f2b88821c8d85 1060 libxml2-dev-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 4ea694613255bf21791d01619fe222f5cccd99cc4170005e576624c7c1a5ab98 701692 libxml2-dev_2.9.3+dfsg1-1ubuntu0.2_s390x.deb ecb8f64d62337be557ade937b9cd9ade9168e6134e2da4b46dac7c732d6534d4 1050 libxml2-udeb-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 5c3e79d62d6fa988131dc85f70efefbe0f516dce11df5a4ab56581fe4661b659 577558 libxml2-udeb_2.9.3+dfsg1-1ubuntu0.2_s390x.udeb 2f6e583955df94f4c5aa28929f880f68f67e79ce8aec306a255fde19048365d9 72176 libxml2-utils-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb cf9277a476e786f8f78765857eee4527ff7c5d914f5151aa6c0891581c57a005 1086 libxml2-utils-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 971182980f5edc8a3362b0ecd800cfc7e281fa77cb9a43d4c85670c2219a9968 34190 libxml2-utils_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 1eb1e483e879ad97c923e910202f83146b970408717a79161d8837fd02972593 641920 libxml2_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 2c9e077baef0d00e82243b9af48a86213400e964945cca7ca88d7b75c7c2316b 251312 python-libxml2-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb e2edf6e80e5956e3c1ab084b9068b59119883ec1964ad49211bf1c074ecf67a8 139672 python-libxml2_2.9.3+dfsg1-1ubuntu0.2_s390x.deb Files: 56d61199a910fe588520e792d9e65c2e 1792316 debug extra libxml2-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 468fefb6775d023df047d320165fbe66 1060 libs extra libxml2-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb eaef24c8e652bd1777c302cb22d323bf 1060 libdevel extra libxml2-dev-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 5edc145e5585fc71c1647af6d683daa5 701692 libdevel optional libxml2-dev_2.9.3+dfsg1-1ubuntu0.2_s390x.deb bc6c07d630c648264f3d53c42e40acd5 1050 debian-installer extra libxml2-udeb-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 340afdd65d32d97eb9b2aa9ff1beeaca 577558 debian-installer optional libxml2-udeb_2.9.3+dfsg1-1ubuntu0.2_s390x.udeb 54f872a7700b2e7a7fdfb34c5cb07e3e 72176 debug extra libxml2-utils-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb b5ad5cd424a8073d6c6f04e928446634 1086 text extra libxml2-utils-dbgsym_2.9.3+dfsg1-1ubuntu0.2_s390x.ddeb 001144cab6628e5872165361a83c4889 34190 text optional libxml2-utils_2.9.3+dfsg1-1ubuntu0.2_s390x.deb ad20bda7d8571f7916dc23bc8674d51a 641920 libs standard libxml2_2.9.3+dfsg1-1ubuntu0.2_s390x.deb cb7e7304ff0cdc1b1f810ec7f9c64251 251312 debug extra python-libxml2-dbg_2.9.3+dfsg1-1ubuntu0.2_s390x.deb 8c4a0e55b674bb67d13789069211d1a2 139672 python optional python-libxml2_2.9.3+dfsg1-1ubuntu0.2_s390x.deb Original-Maintainer: Debian XML/SGML Group Package-Type: udeb