Format: 1.8
Date: Thu, 07 Mar 2024 12:03:35 +0100
Source: libxmltok
Binary: libxmltok1-dev libxmltok1t64
Built-For-Profiles: noudeb
Architecture: ppc64el
Version: 1.2-4.1ubuntu1
Distribution: noble-proposed
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos02-ppc64el-022.buildd>
Changed-By: Matthias Klose <doko@ubuntu.com>
Description:
 libxmltok1-dev - XML Parser Toolkit, developer libraries
 libxmltok1t64 - XML Parser Toolkit, runtime libraries
Changes:
 libxmltok (1.2-4.1ubuntu1) noble; urgency=medium
 .
   * Merge with Debian; remaining changes:
     + SECURITY UPDATE: Incomplete validation of encoding
       - debian/patches/CVE-2022-25235-1.patch: remove the unused macro
         UTF8_GET_NAMING from xmltok/xmltok.c.
       - debian/patches/CVE-2022-25235-2.patch: add verification calls to
         IS_INVALID_CHAR() in CHECK_NAME_CASE, CHECK_NMSTRT_CASE and
         prologTok methods.
       - debian/patches/CVE-2022-25235-3.patch: add comments to BT_LEAD
         cases in xmltok/xmltok_impl.c.
       - CVE-2022-25235
     + SECURITY UPDATE: Namespace-separator insertions
       - debian/patches/CVE-2022-25236-1.patch: add a validation for
         nameSpaceSeparator in addBinding() in xmlparse/xmlparse.c.
       - debian/patches/CVE-2022-25236-2.patch: add a new method
         is_rfc3986_uri_char() to the previous validation in addBinding()
         in xmlparse/xmlparse.c.
       - CVE-2022-25236
Checksums-Sha1:
 7940f0ce8971b86a247c649fca8af7f0164219bd 71106 libxmltok1-dev_1.2-4.1ubuntu1_ppc64el.deb
 b35d5f64bd16350f643bb6dec65c4f8587712e6f 6506 libxmltok1t64-dbgsym_1.2-4.1ubuntu1_ppc64el.ddeb
 24a72b7cbaa845c6e47ffc0aed2be3bd1e6c4a6e 56812 libxmltok1t64_1.2-4.1ubuntu1_ppc64el.deb
 ec8d77de14007f051265511df3b1ef516db9d9c8 6092 libxmltok_1.2-4.1ubuntu1_ppc64el.buildinfo
Checksums-Sha256:
 889411880013f5472eed88eba5a2ae8412792c8d57281afc70232b56ae6bff4f 71106 libxmltok1-dev_1.2-4.1ubuntu1_ppc64el.deb
 8b3424f6c3e5deb1ae2ba9a3fd2c28bbcff086062bf26a90420dcd953ac9e423 6506 libxmltok1t64-dbgsym_1.2-4.1ubuntu1_ppc64el.ddeb
 885357b16c07d7c7c00646a784a547da56fa295eeced7fb6614b7ebe9b358de6 56812 libxmltok1t64_1.2-4.1ubuntu1_ppc64el.deb
 7f526893c664b55845a2cc82b1942f2747911cb6572bdb17b66b849ecb3f2771 6092 libxmltok_1.2-4.1ubuntu1_ppc64el.buildinfo
Files:
 ab8d3b905b8a7d5fe1adef7dbfeac17a 71106 libdevel optional libxmltok1-dev_1.2-4.1ubuntu1_ppc64el.deb
 5f70fe164fb8cfe0b9e483db46eb6198 6506 debug optional libxmltok1t64-dbgsym_1.2-4.1ubuntu1_ppc64el.ddeb
 c4cd27f77b9909738f654face161e2f3 56812 libs optional libxmltok1t64_1.2-4.1ubuntu1_ppc64el.deb
 dc92adf077c04256f382ae534e103766 6092 libs optional libxmltok_1.2-4.1ubuntu1_ppc64el.buildinfo
Original-Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org>