Your message dated Wed, 28 Nov 2012 16:02:55 +0000
with message-id <e1tdk6b-0002vn...@franck.debian.org>
and subject line Bug#694521: fixed in libxml2 2.9.0+dfsg1-4
has caused the Debian Bug report #694521,
regarding libxml2: CVE-2012-5134
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
694521: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=694521
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libxml2
Version: 2.6.32.dfsg-5+lenny3
Severity: grave
Tags: security
Justification: user security hole
The following was discovered by the Google Chrome developers:
http://googlechromereleases.blogspot.in/2012/11/stable-channel-update.html
Fix:
http://git.gnome.org/browse/libxml2/commit/?id=6a36fbe3b3e001a8a840b5c1fdd81cefc9947f0d
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: libxml2
Source-Version: 2.9.0+dfsg1-4
We believe that the bug you reported is fixed in the latest version of
libxml2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 694...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Aron Xu <a...@debian.org> (supplier of updated libxml2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 28 Nov 2012 22:34:15 +0800
Source: libxml2
Binary: libxml2 libxml2-utils libxml2-utils-dbg libxml2-dev libxml2-dbg
libxml2-doc python-libxml2 python-libxml2-dbg
Architecture: source amd64 all
Version: 2.9.0+dfsg1-4
Distribution: experimental
Urgency: low
Maintainer: Debian XML/SGML Group <debian-xml-sgml-p...@lists.alioth.debian.org>
Changed-By: Aron Xu <a...@debian.org>
Description:
libxml2 - GNOME XML library
libxml2-dbg - Debugging symbols for the GNOME XML library
libxml2-dev - Development files for the GNOME XML library
libxml2-doc - Documentation for the GNOME XML library
libxml2-utils - XML utilities
libxml2-utils-dbg - XML utilities (debug extension)
python-libxml2 - Python bindings for the GNOME XML library
python-libxml2-dbg - Python bindings for the GNOME XML library (debug
extension)
Closes: 694521
Changes:
libxml2 (2.9.0+dfsg1-4) experimental; urgency=low
.
[ Daniel Veillard ]
* Fix potential out of bound access
CVE-2012-5134, Closes: #694521.
Checksums-Sha1:
dc2b53ef2f30d4dc09dd0aaf99f769badd22b8c8 2160 libxml2_2.9.0+dfsg1-4.dsc
a76e649c703421eff3379b703a5901a422d14e36 26572
libxml2_2.9.0+dfsg1-4.debian.tar.gz
cc9b2631a4758ba18a0f61df43068b216b3da683 915596 libxml2_2.9.0+dfsg1-4_amd64.deb
2ac4db82ba14970137df3b544c774003596217ce 96444
libxml2-utils_2.9.0+dfsg1-4_amd64.deb
7f0ecf51135387bc98a00a1d22f0a07f48d8a113 126784
libxml2-utils-dbg_2.9.0+dfsg1-4_amd64.deb
d012a17a64c1e328aa21eed449ed86de4a1dc043 914112
libxml2-dev_2.9.0+dfsg1-4_amd64.deb
926bbfb4a2ad1ea67e158440e989c683b8e7272d 1420786
libxml2-dbg_2.9.0+dfsg1-4_amd64.deb
3c58ff49e5e082f410917362ea33b9670235edb7 1371364
libxml2-doc_2.9.0+dfsg1-4_all.deb
10e91a2aeb8c7ebdeedcfbc45d097cb19f595ca9 349594
python-libxml2_2.9.0+dfsg1-4_amd64.deb
fc68ec80e7d1f89a4d28ceb39c6000c2b84c1a98 735878
python-libxml2-dbg_2.9.0+dfsg1-4_amd64.deb
Checksums-Sha256:
48631c488f646897baae2f658b074c6a8b17e384fef8114f52feef3e60e422f6 2160
libxml2_2.9.0+dfsg1-4.dsc
180965a9f9c08865284aa4eeff9fc8d3ba58e66dccf32952a62011b4454766f0 26572
libxml2_2.9.0+dfsg1-4.debian.tar.gz
a8481187f63258aa795cc64facc8bfd7c0942bf7b8ae5058c50aa067efcb5864 915596
libxml2_2.9.0+dfsg1-4_amd64.deb
d711f05256a254634fc74d8a8dca374addabbbb5d8a82919c2823a30323b82a3 96444
libxml2-utils_2.9.0+dfsg1-4_amd64.deb
3fcf448294d823ade3b672effc7f14a3f877b40b0efe8a84fef237a256dadbdb 126784
libxml2-utils-dbg_2.9.0+dfsg1-4_amd64.deb
e63e86f2a51d0d16ad3378389f33bf78e2b9de68ab61590ffb984c468bc4f098 914112
libxml2-dev_2.9.0+dfsg1-4_amd64.deb
45e53814e7da0d3bd8782daecb87f98365c2ab36a1a13dc00568dc40d57b3ec4 1420786
libxml2-dbg_2.9.0+dfsg1-4_amd64.deb
95ee483df50415a346c78b8b58e86fee7c19242beb9f2b6d5fa62d763190c8e3 1371364
libxml2-doc_2.9.0+dfsg1-4_all.deb
e3f1cf477e300a1558b9246560288fec31886392fd718e399f72e24b4e5d345f 349594
python-libxml2_2.9.0+dfsg1-4_amd64.deb
9e68369babda18d9725a3dfbb9e04d99924bf4c4fd3c4347e8ee023fc34a621f 735878
python-libxml2-dbg_2.9.0+dfsg1-4_amd64.deb
Files:
21a0f2cf8990f19d4679765618403223 2160 libs optional libxml2_2.9.0+dfsg1-4.dsc
7eb64ea58390d160095fdf5b847b8934 26572 libs optional
libxml2_2.9.0+dfsg1-4.debian.tar.gz
2a47bb08fbe36aa3be61ec5bb50cb47d 915596 libs standard
libxml2_2.9.0+dfsg1-4_amd64.deb
cb8d0e5e5023b2b67ab36c873a508cd8 96444 text optional
libxml2-utils_2.9.0+dfsg1-4_amd64.deb
b5f0ebab354a5f0a9cf4c142fc220ab8 126784 debug extra
libxml2-utils-dbg_2.9.0+dfsg1-4_amd64.deb
e135ce3a5e11b120832eb0784e115a2c 914112 libdevel optional
libxml2-dev_2.9.0+dfsg1-4_amd64.deb
e70a2170ddab1b8711a06052be7021a3 1420786 debug extra
libxml2-dbg_2.9.0+dfsg1-4_amd64.deb
8d01ff841faa20ab13d1f9e7e7d0f0a5 1371364 doc optional
libxml2-doc_2.9.0+dfsg1-4_all.deb
8b7d4857dfef44ab2461f27b0a19761b 349594 python optional
python-libxml2_2.9.0+dfsg1-4_amd64.deb
80855365e7d3b36b2dd166b61e4531a3 735878 debug extra
python-libxml2-dbg_2.9.0+dfsg1-4_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBAgAGBQJQtivYAAoJEIAhAkTu07wNav8IAJH5ERqCZGZbrDZtbqfPdhqz
S91EPrTQflgUPLS/EfoNWF6QH/o39rjezJiCKO+Bpn5BGIR6vmlNWK/ol3+xnEL/
0X5mPLT0IihhY7JSMdyzzRWhWy8jkhJuObjVQCBKp0F4wqerS4+g5rWVJkjJLUu1
dr1+nbnoPpPgZ1WrD5YALR/PO6QCtTY62eObEFQZJsHlTh1rw5+RVOsQ/96WuvfP
tupyoHCpqp6SpjFCMXrC8e46JDixT41/AwyXuA4l4pofPnVSRQsdDfUiLIGeeHf4
ssr3JIdwKQpakdVc7mrXdU7J41g7uf0wFm/Zw0Nn2RNWSJ55J2HtvokxH8F/v9I=
=kjls
-----END PGP SIGNATURE-----
--- End Message ---