-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 3.0 (quilt) Source: libxml2 Binary: libxml2, libxml2-utils, libxml2-utils-dbg, libxml2-dev, libxml2-dbg, libxml2-doc, python-libxml2, python-libxml2-dbg Architecture: any all Version: 2.8.0+dfsg1-7+wheezy2 Maintainer: Debian XML/SGML Group <[email protected]> Uploaders: Aron Xu <[email protected]>, YunQiang Su <[email protected]> Homepage: http://xmlsoft.org/ Standards-Version: 3.9.3 Vcs-Browser: http://git.debian.org/?p=debian-xml-sgml/libxml2.git Vcs-Git: git://git.debian.org/debian-xml-sgml/libxml2.git Build-Depends: debhelper (>= 9), perl, dh-autoreconf, autotools-dev, binutils (>= 2.14.90.0.7), python-all-dev (>= 2.6.6-3~), python-all-dbg, zlib1g-dev | libz-dev, liblzma-dev, libreadline-dev | libreadline6-dev Package-List: libxml2 deb libs standard libxml2-dbg deb debug extra libxml2-dev deb libdevel optional libxml2-doc deb doc optional libxml2-utils deb text optional libxml2-utils-dbg deb debug extra python-libxml2 deb python optional python-libxml2-dbg deb debug extra Checksums-Sha1: fcc1bca14d2c7dd73c71556cf0a223a73bd92305 3554683 libxml2_2.8.0+dfsg1.orig.tar.gz 0e1bdef385ac71a065f9e082565e42e428de9e4b 39792 libxml2_2.8.0+dfsg1-7+wheezy2.debian.tar.gz Checksums-Sha256: 46f339843967e861e81f8427373ff2a3d0a8cb608022dea16aa1d345ddcee338 3554683 libxml2_2.8.0+dfsg1.orig.tar.gz 68ea9779c7ae6553d263cf5ac02652ce9937525fef56011e36c0149cd64a26e9 39792 libxml2_2.8.0+dfsg1-7+wheezy2.debian.tar.gz Files: 008920f545a36da4eca363d0c1a0ffee 3554683 libxml2_2.8.0+dfsg1.orig.tar.gz 45f65a383bc7cd449fae45d1920adbf1 39792 libxml2_2.8.0+dfsg1-7+wheezy2.debian.tar.gz -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQIcBAEBAgAGBQJUTOVWAAoJEMOOgWCheEH+eBkQAJQy4i8DYoyyR6aA7ybREjQQ Y/TMNGIU4RwDgONdzswtVWwzJ5oznguxBLvyEZEUe8H92MzOGckZ8VoL7VZlPoM2 ruB8h1Lg0xJlzT5lVjmItcqDVDUPA2nmei5cuy+pOizyp5sqtfpPkJr5q+MlEH8O UIJAWSXa7+39toCkZSbZgLDcLpEI2fpPtwF7GyF0FcYXgUwBO2txWXk3C4G7M4j7 kL9d5qv8JQ4RW5Cm26ITNV7/fR1uhSDt4WaGcQ60vPLmVQfIxccYkg4m6xVXcqmI 0d4ot1VdPxwmliAtClI94veIuFsEvlSHMqHpoOWtN6CINKNTi/vAzr80vve1BGd9 JGjru6DaU0M0LlnFC2YZIAl1tEMzgn6nb3CtoR0MQvznoop9rTMMPCmUqX7UPdzA sd35ecsLlTYX6/30CYrRPJ+9M3szP+6txFxJXSRn3TjLP7b6pbk2rGL5pIatXiF/ A7p1jbTC/mzwLVGHhMgXwbpXYaGMr/946Hp6OYonXm8a7dpaZAapmTAhGXaKYSL4 oL1YQ46LEki8WnJxvXWT+5ODqd1ZsrgJtZoIyWkXGzqOaNKD9J/g3I74QpWcrTbU EbkkmMXNoGMuze4ggVQZ/z7YQ3QBzBzar8r1TSjJd0GqfxCquuM+Ypi0c8gf/s+H HascHaLqaM141hdWmUMS =Ce95 -----END PGP SIGNATURE----- Changes: libxml2 (2.8.0+dfsg1-7+wheezy2) stable-security; urgency=high * Fix buggy patch (Closes: #765770) * Fix wrongly applied patch for CVE-2014-0191 (Closes: #762864) * Add patch for CVE-2014-3660 (Closes: #765722) -- Aron Xu <[email protected]> Sun, 26 Oct 2014 12:39:34 +0800