[Bug 418561] [NEW] Sync xerces-c2 2.8.0+deb1-2 (universe) from Debian unstable (main)

Launchpad Bug Tracker 418561 at bugs.launchpad.net
Tue Aug 25 13:18:08 BST 2009


You have been subscribed to a public bug by Michael Bienia (geser):

-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

 affects ubuntu/xerces-c2
 status confirmed
 importance wishlist
 subscribe ubuntu-archive
 done

Please sync xerces-c2 2.8.0+deb1-2 (universe) from Debian unstable
(main)

Changelog entries since current karmic version 2.8.0-4:

xerces-c2 (2.8.0+deb1-2) unstable; urgency=low

  * Apply patch to correct CVE-2009-1885: DoS attack from nested DTDs.
    (Closes: #541986)

 -- Jay Berkenbilt <qjb at debian.org>  Mon, 24 Aug 2009 11:04:38 -0400

xerces-c2 (2.8.0+deb1-1) unstable; urgency=low

  * Repackage to eliminate tarball-in-orig.tar.gz packaging.  This is the
    same version as 2.8.0.  (Closes: #538572)
  * Updated standards to 3.8.3 (no changes required).

 -- Jay Berkenbilt <qjb at debian.org>  Fri, 21 Aug 2009 18:28:01 -0400

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)

iJwEAQEDAAYFAkqT1d4ACgkQo8/XfXdugupKPgP/QXZorH5aSDMsJHe5+8DKgeyz
H8ZcN4z5KEfeh5SvvKvo80Djj1TaHnosm9qHi0sVKJhkNsV8Z4SXv0TzojFrRd7D
kfV8SR9Gi02NE6wD0Yryyuomub83U50SJ4CaotE9P15021RqCfaGIBWrpveNo2Wg
d7Uk3CjjMvg/x8z0E+Q=
=zPd1
-----END PGP SIGNATURE-----

** Affects: xerces-c2 (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

-- 
Sync xerces-c2 2.8.0+deb1-2 (universe) from Debian unstable (main)
https://bugs.launchpad.net/bugs/418561
You received this bug notification because you are a member of Ubuntu Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list