• Accepted expat 2.5.0-1+deb12u1 (source) into proposed-updates

    From Debian FTP Masters@21:1/5 to All on Wed Sep 18 21:20:01 2024
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Sun, 08 Sep 2024 08:44:19 +0200
    Source: expat
    Architecture: source
    Version: 2.5.0-1+deb12u1
    Distribution: bookworm-security
    Urgency: medium
    Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
    Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
    Closes: 1080149 1080150 1080152
    Changes:
    expat (2.5.0-1+deb12u1) bookworm-security; urgency=medium
    .
    * Backport security fix for CVE-2024-45490: reject negative len for
    XML_ParseBuffer() (closes: #1080149).
    * Backport security fix for CVE-2024-45491: detect integer overflow in
    dtdCopy() (closes: #1080150).
    * Backport security fix for CVE-2024-45492: detect integer overflow in
    function nextScaffoldPart() (closes: #1080152).
    Checksums-Sha1:
    a090f14a8bbb40759949fd4f00db7aedbbf4b8d8 2013 expat_2.5.0-1+deb12u1.dsc
    03d9882ede56aa48919fbf50fe17614630257a82 8320988 expat_2.5.0.orig.tar.gz
    1d6311c2981fcb0425efbba1cb5417905fbac3fe 13724 expat_2.5.0-1+deb12u1.debian.tar.xz
    25416e403e0c246a662c691a92f20a7d670c3c8f 9004 expat_2.5.0-1+deb12u1_amd64.buildinfo
    Checksums-Sha256:
    6507e647ff25e88be44b413089b357b4a837a461f11353dd38d7686e3e5733a4 2013 expat_2.5.0-1+deb12u1.dsc
    ab00ee05c7067fd10a35c5d2a4922ebba746ddd50ff83b79c828da17bbdf1757 8320988 expat_2.5.0.orig.tar.gz
    32e9a953f5a240fca186e077ca957fe9352777707b650a58ff989650b9fa0a80 13724 expat_2.5.0-1+deb12u1.debian.tar.xz
    510a44ed4b4de580aab5b4035ee2f708986a09bf1c826984ab01bf68a90f2a18 9004 expat_2.5.0-1+deb12u1_amd64.buildinfo
    Files:
    293b800314254ac85eaaa734eb21c3e1 2013 text optional expat_2.5.0-1+deb12u1.dsc
    d375fa3571c0abb945873f5061a8f2e2 8320988 text optional expat_2.5.0.orig.tar.gz
    df8f2ce3e9ef757f1b1799b7ce326488 13724 text optional expat_2.5.0-1+deb12u1.debian.tar.xz
    b320d197550f5aa1d3bfdf2da6bdca90 9004 text optional expat_2.5.0-1+deb12u1_amd64.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmblRLgACgkQ3OMQ54ZM yL/DGhAAms5NIjOKNnyPzYqBY1UbBPfY1ft6SHMGWV1Rrz1IHsU3mT0Rf2M3r/UI 5K08HgAh9hrd7E607eLvW8oJNYEQbzZ62yTGuVfzDvON1OhBJDhgbaOkB2qaFrmi 2vVvhp2k6ALHXpoG+dGIoEFNWKLNQQa9TirkEgBG/vfx5SLhLkYDuB/6lO7XFl0P drEz+i9caf2JMHC4tHm7yQ2y4YACKiJt5bXKExxNe/Yprt98xHIapmzauY53Uudf RUOX9tdskLAtpWsoPHxY4GTBrvDuJxDVY+Xs4Pu1HHBwZSaywi3iWTRfq8AN4PrE YykGtHMMOaM1i1QhWkcJ4ZxjYncXm0SxXMQFkkoNjq55p1Wkf0glARtRUBtAGcLV v8X+MR4Cpq2YVZaj8RhF53LIaZxTSztZk0pKSjO65ks93Ikxi57HJXgaAdagcqIk jVW66FG1eyseur2rHkYoR/jiLEKWsHyV5AAIFrmKfquimsrvcZ0IMkm2/cdPPdd8 j4m6xgJB/tWbYGGjJAuPCRRFIzR7C/149Ja6qSgQFXdcrpcr/QtRsUy2k8OuMwFe JplYx3dtAXD5Emlmff8a/ySYDc07g04fslukD+jpjtA6fKUY9CB24m2TdOfij0T0 pF6VzSUEk2WGrWCiWqUNO+gxdiIvF17/4yiwQu43NS1X0FfYOCw=
    =deJw
    -----END PGP SIGNATURE-----


    --==============c28674326193502671=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCZusnNQAKCRCb9qggYcy5 IVLoAP0f4rVFrVbdp3VUsWXH+xaXIuQTUAqRR9TLboq5dlMiHQD/flcq+B5Oijcs +jQBl5/s+yYUhyvpdfT0mxwX8qQv2Aw=9MyX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)