Your message dated Sat, 04 Jun 2011 02:52:18 +0000
with message-id <e1qsgyi-000055...@franck.debian.org>
and subject line Bug#628537: fixed in libxml2 2.7.8.dfsg-3
has caused the Debian Bug report #628537,
regarding libxml2: overflow issues
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
628537: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=628537
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
package: libxml2
version: 2.7.8.dfsg-2
severity: serious
tag: security
some overflow issues were disclosed for libxml2. see:
http://scarybeastsecurity.blogspot.com/2011/05/libxml-vulnerability-and-interesting.html
best wishes,
mike
--- End Message ---
--- Begin Message ---
Source: libxml2
Source-Version: 2.7.8.dfsg-3
We believe that the bug you reported is fixed in the latest version of
libxml2, which is due to be installed in the Debian FTP archive:
libxml2-dbg_2.7.8.dfsg-3_amd64.deb
to main/libx/libxml2/libxml2-dbg_2.7.8.dfsg-3_amd64.deb
libxml2-dev_2.7.8.dfsg-3_amd64.deb
to main/libx/libxml2/libxml2-dev_2.7.8.dfsg-3_amd64.deb
libxml2-doc_2.7.8.dfsg-3_all.deb
to main/libx/libxml2/libxml2-doc_2.7.8.dfsg-3_all.deb
libxml2-utils_2.7.8.dfsg-3_amd64.deb
to main/libx/libxml2/libxml2-utils_2.7.8.dfsg-3_amd64.deb
libxml2_2.7.8.dfsg-3.diff.gz
to main/libx/libxml2/libxml2_2.7.8.dfsg-3.diff.gz
libxml2_2.7.8.dfsg-3.dsc
to main/libx/libxml2/libxml2_2.7.8.dfsg-3.dsc
libxml2_2.7.8.dfsg-3_amd64.deb
to main/libx/libxml2/libxml2_2.7.8.dfsg-3_amd64.deb
python-libxml2-dbg_2.7.8.dfsg-3_amd64.deb
to main/libx/libxml2/python-libxml2-dbg_2.7.8.dfsg-3_amd64.deb
python-libxml2_2.7.8.dfsg-3_amd64.deb
to main/libx/libxml2/python-libxml2_2.7.8.dfsg-3_amd64.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 628...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mike Hommey <gland...@debian.org> (supplier of updated libxml2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 04 Jun 2011 10:40:39 +0900
Source: libxml2
Binary: libxml2 libxml2-utils libxml2-dev libxml2-dbg libxml2-doc
python-libxml2 python-libxml2-dbg
Architecture: source amd64 all
Version: 2.7.8.dfsg-3
Distribution: unstable
Urgency: low
Maintainer: Debian XML/SGML Group <debian-xml-sgml-p...@lists.alioth.debian.org>
Changed-By: Mike Hommey <gland...@debian.org>
Description:
libxml2 - GNOME XML library
libxml2-dbg - Debugging symbols for the GNOME XML library
libxml2-dev - Development files for the GNOME XML library
libxml2-doc - Documentation for the GNOME XML library
libxml2-utils - XML utilities
python-libxml2 - Python bindings for the GNOME XML library
python-libxml2-dbg - Python bindings for the GNOME XML library (debug
extension)
Closes: 628537
Changes:
libxml2 (2.7.8.dfsg-3) unstable; urgency=low
.
* xpath.c: Fix some potential problems on reallocation failures.
Closes: #628537.
Checksums-Sha1:
7c46c4d28e35797a2a1dcd335f7fa47e82a9fb0c 2150 libxml2_2.7.8.dfsg-3.dsc
7f8ea8ca5ad328ddbdea6cea79805808429eb975 117800 libxml2_2.7.8.dfsg-3.diff.gz
19224520e1d50069afe7fc4a131dccc77e3776d0 889754 libxml2_2.7.8.dfsg-3_amd64.deb
aedde7f5ba342007244aabe61003446e806efb5f 92678
libxml2-utils_2.7.8.dfsg-3_amd64.deb
a379a15f3acf8c3dff6fa300c9cd18f76e0b5fcb 851238
libxml2-dev_2.7.8.dfsg-3_amd64.deb
6989709287f8446b473e4337af141c6dee9b4e17 1117564
libxml2-dbg_2.7.8.dfsg-3_amd64.deb
f29b6c67ab0375e92ef95c0ffe908ee4ad622013 1344098
libxml2-doc_2.7.8.dfsg-3_all.deb
13021be3bd62d6c43a7854b671e2261dc213e997 339224
python-libxml2_2.7.8.dfsg-3_amd64.deb
6a025b26ecfea46ca8a6a19f22cfdae6734afb92 854356
python-libxml2-dbg_2.7.8.dfsg-3_amd64.deb
Checksums-Sha256:
eb2f4d8ef45fa5629d8fff44d36207830f026b2c7b1c4e08625997b8bd763da9 2150
libxml2_2.7.8.dfsg-3.dsc
ea0761998dae7fa143fcf5c087912216f02ee57b0ae15991ebf1976b5d1dba06 117800
libxml2_2.7.8.dfsg-3.diff.gz
6749bc830cc449e0956f50b649757ef6a10f6ffed9bfa6b584c4e995a69a5329 889754
libxml2_2.7.8.dfsg-3_amd64.deb
f6a5f97d3417433f9d7df36cc369631676e46e6afed3fd2b75d5a48a8aed18ba 92678
libxml2-utils_2.7.8.dfsg-3_amd64.deb
2883a841f326c0a56af73b1162f9755d75f227b033a6247b71e0eb0e49fe76c7 851238
libxml2-dev_2.7.8.dfsg-3_amd64.deb
b933e77c88ba78926f21d79e78950c3726d9105c8294b1b013aa8511798571fb 1117564
libxml2-dbg_2.7.8.dfsg-3_amd64.deb
3314cc883c1e18d2a6b89a161a8ac3389dda7dcd5c9c596b411a108d2270e447 1344098
libxml2-doc_2.7.8.dfsg-3_all.deb
84ed4cf86db6897452f6dbb9387f6b7c7005e2bd99a6e9cef27c610a5522bf01 339224
python-libxml2_2.7.8.dfsg-3_amd64.deb
5ff92f68cc7d8501a758c153d3ff2a3f659ba04253ec6de0bb7b17e64596e2b9 854356
python-libxml2-dbg_2.7.8.dfsg-3_amd64.deb
Files:
185e323fbeafaa1a4c0dc6a04846beb2 2150 libs optional libxml2_2.7.8.dfsg-3.dsc
c1931b2fb300ab9971dadfd79c02ad48 117800 libs optional
libxml2_2.7.8.dfsg-3.diff.gz
92f1cbdb8aaebbca7ec9694809e8f438 889754 libs standard
libxml2_2.7.8.dfsg-3_amd64.deb
ece1501b75d79dddc07a48af5e6714b2 92678 text optional
libxml2-utils_2.7.8.dfsg-3_amd64.deb
c57b4355db1af86712fe41ae16789d76 851238 libdevel optional
libxml2-dev_2.7.8.dfsg-3_amd64.deb
45d731c6eb9a6bb7d4768acd0cb8fbdd 1117564 debug extra
libxml2-dbg_2.7.8.dfsg-3_amd64.deb
a8267689734956ae7fbb6d673c9c4c92 1344098 doc optional
libxml2-doc_2.7.8.dfsg-3_all.deb
5c3e8025c406d7149c594b758829e36d 339224 python optional
python-libxml2_2.7.8.dfsg-3_amd64.deb
42d64b003543b16b0ea254b73086ec54 854356 debug extra
python-libxml2-dbg_2.7.8.dfsg-3_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=x10N
-----END PGP SIGNATURE-----
--- End Message ---
