-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4472-1 security@xxxxxxxxxx https://www.debian.org/security/ Salvatore Bonaccorso June 28, 2019 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : expat CVE ID : CVE-2018-20843 Debian Bug : 931031 It was discovered that Expat, an XML parsing C library, did not properly handled XML input including XML names that contain a large number of colons, potentially resulting in denial of service. For the stable distribution (stretch), this problem has been fixed in version 2.2.0-2+deb9u2. We recommend that you upgrade your expat packages. For the detailed security status of expat please refer to its security tracker page at: https://security-tracker.debian.org/tracker/expat Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl0V3XVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Qsyw//SzMGmBKKj5Lxsxd35i4Vo/Pa2I2pAtgAE+6aNIoJ8ddCRO9CtW4RsVSS OLQDVUEB0mst7xFQizE3riJQYjYO65x9aP6TaRjMOaccNB+G992zJD/qP90W9nvN 2qbwNeEdbNnbLELTycPlhzDyJ5R7nmvgogHiqtIlisqI5ZSI7OMqOFP5LvAvw/tt UJmy2ZTbVLo7rpWjLfIj0YcNXy2IKcF0SA/lZQuj6KYrbHnhj0rrLxEL2OwdDBsm HV/SXRjLMEak5GhDBiwTTvfYFk8weKdl0MST1hizKSsqTQPqTvHLOOKXYHgCJSfV 87YbFT3k9xqotM8ymeajNnoepJbnbCAPo3i0rCqftARokfe5lFYWIqKpUCXepeQL PnigDmnrql4acTlKOBOnq+3vKtf8xL1HHVegzzejbJB5ff3I9Pw4AuRoLl9sMmzI rorVrMZ2tQCPrDL5XabSkRg3IBJcknS4qjQ8fgM9tt5ruImUX4RQn4J3ACLapCnt 0+wX3gtCKUviTght96hXGj4MDuMmiSxNEQ66Demiq5sXjP5c4x696XVjYaBy2uGg mma8aksL1SJaOjS0yHzxzwXwU7caQEBThAOfaBwGplgv/Kv42VbrDp3idf+9SZdA R5l4hGu8jyR5YDFoj4+WgmvhLwb4UC1JBDeEsBUe03ZmnDhyhxM= =4Etl -----END PGP SIGNATURE-----
