Your message dated Sun, 01 Jan 2012 18:05:35 +0000
with message-id <e1rhpmp-0006kw...@franck.debian.org>
and subject line Bug#652352: fixed in libxml2 2.7.8.dfsg-5.1
has caused the Debian Bug report #652352,
regarding Two security issues
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
652352: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652352
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libxml2
Version: 2.6.32.dfsg-5.34.201109131010
Severity: grave
Tags: security
Please see the Red Hat bugzilla for links to patches:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-0216
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-3905
Cheers,
Moritz
-- System Information:
Debian Release: 5.0.1
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.32-ucs44-amd64
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Versions of packages libxml2 depends on:
ii libc6 2.7-18.32.201101241735 GNU C Library: Shared libraries
ii zlib1g 1:1.2.3.3.dfsg-12.30.200909150153 compression library - runtime
Versions of packages libxml2 recommends:
ii xml-core 0.12.11.200909150645 XML infrastructure and XML catalog
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: libxml2
Source-Version: 2.7.8.dfsg-5.1
We believe that the bug you reported is fixed in the latest version of
libxml2, which is due to be installed in the Debian FTP archive:
libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
to main/libx/libxml2/libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
libxml2-dev_2.7.8.dfsg-5.1_i386.deb
to main/libx/libxml2/libxml2-dev_2.7.8.dfsg-5.1_i386.deb
libxml2-doc_2.7.8.dfsg-5.1_all.deb
to main/libx/libxml2/libxml2-doc_2.7.8.dfsg-5.1_all.deb
libxml2-utils_2.7.8.dfsg-5.1_i386.deb
to main/libx/libxml2/libxml2-utils_2.7.8.dfsg-5.1_i386.deb
libxml2_2.7.8.dfsg-5.1.diff.gz
to main/libx/libxml2/libxml2_2.7.8.dfsg-5.1.diff.gz
libxml2_2.7.8.dfsg-5.1.dsc
to main/libx/libxml2/libxml2_2.7.8.dfsg-5.1.dsc
libxml2_2.7.8.dfsg-5.1_i386.deb
to main/libx/libxml2/libxml2_2.7.8.dfsg-5.1_i386.deb
python-libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
to main/libx/libxml2/python-libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
python-libxml2_2.7.8.dfsg-5.1_i386.deb
to main/libx/libxml2/python-libxml2_2.7.8.dfsg-5.1_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 652...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Luk Claes <l...@debian.org> (supplier of updated libxml2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 30 Dec 2011 18:31:13 +0100
Source: libxml2
Binary: libxml2 libxml2-utils libxml2-dev libxml2-dbg libxml2-doc
python-libxml2 python-libxml2-dbg
Architecture: source i386 all
Version: 2.7.8.dfsg-5.1
Distribution: unstable
Urgency: high
Maintainer: Debian XML/SGML Group <debian-xml-sgml-p...@lists.alioth.debian.org>
Changed-By: Luk Claes <l...@debian.org>
Description:
libxml2 - GNOME XML library
libxml2-dbg - Debugging symbols for the GNOME XML library
libxml2-dev - Development files for the GNOME XML library
libxml2-doc - Documentation for the GNOME XML library
libxml2-utils - XML utilities
python-libxml2 - Python bindings for the GNOME XML library
python-libxml2-dbg - Python bindings for the GNOME XML library (debug
extension)
Closes: 652352
Changes:
libxml2 (2.7.8.dfsg-5.1) unstable; urgency=high
.
* Non-maintainer upload.
* encoding.c: Fix off by one error. CVE-2011-0216.
* parser.c: Make sure parser returns when getting a Stop order.
CVE-2011-3905.
* Both closes: #652352.
Checksums-Sha1:
13b020a381742e5389721cefc5641dd82d36fcf1 1746 libxml2_2.7.8.dfsg-5.1.dsc
af8d86faf495f4689d1ca26f7637eaeef1833ff2 118918 libxml2_2.7.8.dfsg-5.1.diff.gz
d9cb76a05f362f899f69c5645f0c49ecd137a553 882164 libxml2_2.7.8.dfsg-5.1_i386.deb
4ade853403866422e58f1238b6a907cc45f0fdb6 91374
libxml2-utils_2.7.8.dfsg-5.1_i386.deb
bf562eb171224d33b63fde4d876cf6e013540dfc 811664
libxml2-dev_2.7.8.dfsg-5.1_i386.deb
b4abc0b5e4a1ec07d468c3ca798aa9d35b0840b4 1072984
libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
39bfa9c51849509ea8118c83bb6f91be86d68ca0 1379148
libxml2-doc_2.7.8.dfsg-5.1_all.deb
4d08b2b05b4b543c1b53a3d75282e22cfe64cbf1 367028
python-libxml2_2.7.8.dfsg-5.1_i386.deb
773b38ccbbcd47c994bccb259f7d0476ab832bc2 823506
python-libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
Checksums-Sha256:
ac3bf267a08681deaa201fd9d792999adc8f078deb965b7c021b24c4adf92f9f 1746
libxml2_2.7.8.dfsg-5.1.dsc
ddeffec50782a5340cc295481d7ebda14f2b1d18634b5055c797764b061a8bfb 118918
libxml2_2.7.8.dfsg-5.1.diff.gz
fa4e02359463ff62d69d5455ced9e5153ca30916cdbb68d6370de2199d9209a3 882164
libxml2_2.7.8.dfsg-5.1_i386.deb
14d4c285e79ba46ce08815c1b3c290601887b3129572390a88b8ec39235bf124 91374
libxml2-utils_2.7.8.dfsg-5.1_i386.deb
4e37bf00d131f07ec429af54f9d2d6576fc5fdae9d8cff34177a05c51f57a0bb 811664
libxml2-dev_2.7.8.dfsg-5.1_i386.deb
a3590099b5fd37ddb59d9b8dbb7a97659a3d2134120780502fd89b0f881d1c7c 1072984
libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
bdcc451f94bdfb54af7cbe9cdff53ba8f37611163faf6701d01210b186f215d7 1379148
libxml2-doc_2.7.8.dfsg-5.1_all.deb
cd1c83e6d490525f872b4d357ff016da60869c83afc894db00bbe17146f67087 367028
python-libxml2_2.7.8.dfsg-5.1_i386.deb
22029794c49ffeedb9fefe5c6ecb7b2ef82dfc6d016a59888425befc6111ee2f 823506
python-libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
Files:
bda47a813d9e2196bf888230533b7e26 1746 libs optional libxml2_2.7.8.dfsg-5.1.dsc
152b8683d0d60124b61e6b2de8619356 118918 libs optional
libxml2_2.7.8.dfsg-5.1.diff.gz
dc1f9f6a623dda128e898a2a9aae2ee2 882164 libs standard
libxml2_2.7.8.dfsg-5.1_i386.deb
fb232ee347441d9788c0cbd45fcce676 91374 text optional
libxml2-utils_2.7.8.dfsg-5.1_i386.deb
3497cce72f2b504206478d4140feec25 811664 libdevel optional
libxml2-dev_2.7.8.dfsg-5.1_i386.deb
df64a90312a2494dfa53b125da747482 1072984 debug extra
libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
77120febb138b3682b1f8d82f554916e 1379148 doc optional
libxml2-doc_2.7.8.dfsg-5.1_all.deb
500f6f73330fc03cf3e420a879d162a0 367028 python optional
python-libxml2_2.7.8.dfsg-5.1_i386.deb
d0fcd361e1ef4c3afa529fc33a311b24 823506 debug extra
python-libxml2-dbg_2.7.8.dfsg-5.1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk79984ACgkQ5UTeB5t8Mo3zNgCeLGjuKo30bG0WRUr9mLflInMu
KfgAn2RcMHZz1WTT5CgS6UTsFdUeA52e
=0fHD
-----END PGP SIGNATURE-----
--- End Message ---
