Format: 1.8
Date: Fri, 18 Nov 2022 12:21:42 +0100
Source: expat
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.7-1ubuntu0.2
Distribution: jammy-security
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Changed-By: David Fernandez Gonzalez <david.fernandezgonzalez@canonical.com>
Changes:
 expat (2.4.7-1ubuntu0.2) jammy-security; urgency=medium
 .
   * SECURITY UPDATE: use-after-free
     - debian/patches/CVE-2022-43680-1.patch: adds tests to cover
       DTD destruction in XML_ExternalEntityParserCreate in
       expat/tests/runtests.c.
     - debian/patches/CVE-2022-43680-2.patch: fix overeager DTD
       destruction in XML_ExternalEntityParserCreate in
       expat/lib/xmlparse.c.
     - CVE-2022-43680
Checksums-Sha1:
 a3382ca8cc87cef5b62b65ab726eb06e046fb6f8 2149 expat_2.4.7-1ubuntu0.2.dsc
 ff013694d24fb4d2d6700e1b91915c96143c0dc0 14828 expat_2.4.7-1ubuntu0.2.debian.tar.xz
 43421dcc72633a88bf34d4ccde57703071f3839e 8208 expat_2.4.7-1ubuntu0.2_source.buildinfo
Checksums-Sha256:
 effd2139b249bbe05b8770d07992827d354dc5e11757e7700d08a0b41c7e907d 2149 expat_2.4.7-1ubuntu0.2.dsc
 7b61a600a00bf9039efccee6cc28d7a49f5092aea8921883c06ef159b44c746d 14828 expat_2.4.7-1ubuntu0.2.debian.tar.xz
 62b2603451526e52158d2d57f9cef09f47542a017054b478d0f262cd8790216f 8208 expat_2.4.7-1ubuntu0.2_source.buildinfo
Files:
 e34cab47eeb8b5cc8b479eb7ed0ea096 2149 text optional expat_2.4.7-1ubuntu0.2.dsc
 d3558a06d7c70b353ceb293359cb51bc 14828 text optional expat_2.4.7-1ubuntu0.2.debian.tar.xz
 971938fd55cf735e51d14a261f685143 8208 text optional expat_2.4.7-1ubuntu0.2_source.buildinfo
Original-Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>