[Bug 1943133] [NEW] Sync expat 2.4.1-1 (main) from Debian experimental (main)

Rico Tzschichholz 1943133 at bugs.launchpad.net
Thu Sep 9 12:31:05 UTC 2021


Public bug reported:

Please sync expat 2.4.1-1 (main) from Debian experimental (main)

Changelog entries since current impish version 2.3.0-1:

expat (2.4.1-1) experimental; urgency=high

  * New upstream release:
    - fix CVE-2013-0340: protect against billion laughs attacks
      (denial-of-service; flavors targeting CPU time or RAM or both,
      leveraging general entities or parameter entities or both).
  * Update libexpat1 symbols.

 -- Laszlo Boszormenyi (GCS) <gcs at debian.org>  Mon, 24 May 2021 10:14:11
+0200

** Affects: expat (Ubuntu)
     Importance: Wishlist
         Status: New

** Changed in: expat (Ubuntu)
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to expat in Ubuntu.
https://bugs.launchpad.net/bugs/1943133

Title:
  Sync expat 2.4.1-1 (main) from Debian experimental (main)

Status in expat package in Ubuntu:
  New

Bug description:
  Please sync expat 2.4.1-1 (main) from Debian experimental (main)

  Changelog entries since current impish version 2.3.0-1:

  expat (2.4.1-1) experimental; urgency=high

    * New upstream release:
      - fix CVE-2013-0340: protect against billion laughs attacks
        (denial-of-service; flavors targeting CPU time or RAM or both,
        leveraging general entities or parameter entities or both).
    * Update libexpat1 symbols.

   -- Laszlo Boszormenyi (GCS) <gcs at debian.org>  Mon, 24 May 2021
  10:14:11 +0200

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/expat/+bug/1943133/+subscriptions




More information about the foundations-bugs mailing list