Your message dated Wed, 28 Nov 2012 15:32:38 +0000
with message-id <e1tdjcs-00040b...@franck.debian.org>
and subject line Bug#694521: fixed in libxml2 2.8.0+dfsg1-7
has caused the Debian Bug report #694521,
regarding libxml2: CVE-2012-5134
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
694521: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694521
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libxml2
Version: 2.6.32.dfsg-5+lenny3
Severity: grave
Tags: security
Justification: user security hole
The following was discovered by the Google Chrome developers:
http://googlechromereleases.blogspot.in/2012/11/stable-channel-update.html
Fix:
http://git.gnome.org/browse/libxml2/commit/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: libxml2
Source-Version: 2.8.0+dfsg1-7
We believe that the bug you reported is fixed in the latest version of
libxml2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 694...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Aron Xu <a...@debian.org> (supplier of updated libxml2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 28 Nov 2012 22:40:13 +0800
Source: libxml2
Binary: libxml2 libxml2-utils libxml2-utils-dbg libxml2-dev libxml2-dbg
libxml2-doc python-libxml2 python-libxml2-dbg
Architecture: source amd64 all
Version: 2.8.0+dfsg1-7
Distribution: unstable
Urgency: low
Maintainer: Debian XML/SGML Group <debian-xml-sgml-p...@lists.alioth.debian.org>
Changed-By: Aron Xu <a...@debian.org>
Description:
libxml2 - GNOME XML library
libxml2-dbg - Debugging symbols for the GNOME XML library
libxml2-dev - Development files for the GNOME XML library
libxml2-doc - Documentation for the GNOME XML library
libxml2-utils - XML utilities
libxml2-utils-dbg - XML utilities (debug extension)
python-libxml2 - Python bindings for the GNOME XML library
python-libxml2-dbg - Python bindings for the GNOME XML library (debug
extension)
Closes: 694521
Changes:
libxml2 (2.8.0+dfsg1-7) unstable; urgency=low
.
[ Daniel Veillard ]
* Fix potential out of bound access
CVE-2012-5134, Closes: #694521.
Checksums-Sha1:
39a651309067f7cb5c313ed7b006487d613556f5 2137 libxml2_2.8.0+dfsg1-7.dsc
2513f171e315f2d2939fa0b7ad80be0d7284eb49 32648
libxml2_2.8.0+dfsg1-7.debian.tar.gz
1c2d27b41e76829b8d3abf7e5611213952393d15 903034 libxml2_2.8.0+dfsg1-7_amd64.deb
8d7a106f1db2794d8ee8e015e3d94cd03ba2ab2e 96186
libxml2-utils_2.8.0+dfsg1-7_amd64.deb
e82d81e916283c9c57950439a95e4c098e49d58c 126750
libxml2-utils-dbg_2.8.0+dfsg1-7_amd64.deb
da5bd36a9390550de0c65e2fcec3c1837e298892 899304
libxml2-dev_2.8.0+dfsg1-7_amd64.deb
daff51f3e029aafe6200ea183fb5c3c728d979d3 1400748
libxml2-dbg_2.8.0+dfsg1-7_amd64.deb
6d703cea78080b37bfcb8c46a33ed1e252ea724a 1355836
libxml2-doc_2.8.0+dfsg1-7_all.deb
2a9191deeb9da8afe47dd31fc41ea3443315430b 345084
python-libxml2_2.8.0+dfsg1-7_amd64.deb
c4003f7f1f0bf0c4b563240c4f21703f3fbf1193 727190
python-libxml2-dbg_2.8.0+dfsg1-7_amd64.deb
Checksums-Sha256:
1c3e1cb20583562ff30e877858f071a22e2b617c4a5fa3458258c1b13afca578 2137
libxml2_2.8.0+dfsg1-7.dsc
f89ce0800176595d79786373644284d581beea325e5eb81134987b97b5a84418 32648
libxml2_2.8.0+dfsg1-7.debian.tar.gz
7244e5b2cb3ccc48e80763576ca2d370dfab39df13837fc409a3e7fe75e95f60 903034
libxml2_2.8.0+dfsg1-7_amd64.deb
ec246f90579770ccf39bcf7c94fa51f7e2b349af770dc023242d7452fb1471a1 96186
libxml2-utils_2.8.0+dfsg1-7_amd64.deb
9eda58674b06212f4e9e1e5eb678b22c3cd077fcb917fb65ecc754fb03cc0f84 126750
libxml2-utils-dbg_2.8.0+dfsg1-7_amd64.deb
4aac0da2f01c394cd0d159c3b08749f0ac0fe8b8c775a2b55938b372ab6e7eda 899304
libxml2-dev_2.8.0+dfsg1-7_amd64.deb
ce22678370b5f284936c095877e9f630f5da3ca60caf18ca33259e9bd3ea48a8 1400748
libxml2-dbg_2.8.0+dfsg1-7_amd64.deb
a0b4ce61d4ff0a918308282c49eb0fa0b479560913dd49fcbb3b1099cbcae3f5 1355836
libxml2-doc_2.8.0+dfsg1-7_all.deb
b5679c9b3d31bbdaa6b82d7122371d5734eb9503e8350aebcffd22850027e335 345084
python-libxml2_2.8.0+dfsg1-7_amd64.deb
d2e57a292771a9b55cceb1c66f358fc00dfa9b641f03fe46454247adb7a252b6 727190
python-libxml2-dbg_2.8.0+dfsg1-7_amd64.deb
Files:
c7e44a22ac8b10b4d35f35767377cbe9 2137 libs optional libxml2_2.8.0+dfsg1-7.dsc
c185998850e76de96dca24b684135701 32648 libs optional
libxml2_2.8.0+dfsg1-7.debian.tar.gz
56cb3ab93218a8845d8523f30dacb117 903034 libs standard
libxml2_2.8.0+dfsg1-7_amd64.deb
5ea5c74a14b04d6fd29c37cf2ff58dfd 96186 text optional
libxml2-utils_2.8.0+dfsg1-7_amd64.deb
9fd01f2efcb844f2a623c38521108d23 126750 debug extra
libxml2-utils-dbg_2.8.0+dfsg1-7_amd64.deb
b3342a6379fce8f658f8ac06b64855c8 899304 libdevel optional
libxml2-dev_2.8.0+dfsg1-7_amd64.deb
a287a663ea6c3d54aae6ca904b62d03e 1400748 debug extra
libxml2-dbg_2.8.0+dfsg1-7_amd64.deb
c58357c27c3a6698d1e140c2493a8784 1355836 doc optional
libxml2-doc_2.8.0+dfsg1-7_all.deb
06fc16e2f212558c38bb7b95d1bbf891 345084 python optional
python-libxml2_2.8.0+dfsg1-7_amd64.deb
bd08f083a03c3f06b011e1c9fb60803d 727190 debug extra
python-libxml2-dbg_2.8.0+dfsg1-7_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBAgAGBQJQtiwKAAoJEIAhAkTu07wNF0EIAIqaITHBoUZ35CSTmVv5tutU
Ntjg5rg8ww6qOUtchOmQgFqM0DZ3jtY94auaVJXWIUwBf/2KH/Qf4tMdj0cinzlA
2yKCeVEArj+jBFm6wVHRTtv3fCbuSUXPieNdJEo0b9eBv1AvFPEfXzlQ/Q8JKQN7
twixffeuF8DqJSNkayDSaFjlGRTlhl6txUymP5QjF+VbuBT1RH/aM09NNU2VvcZ5
B67TVoAimHh3vGjSPRymJKv6ZBC13AMEkVAc9UCkoM/OyvjVbxSFn7KcqgqTw1Dj
NeGWTuVmvYo0IS9mTE1bztsogntX5N4FHRQXXe5JKX+xhE2sjCCgYJQ0phLD7/4=
=Z7nx
-----END PGP SIGNATURE-----
--- End Message ---