Path: csiph.com!weretis.net!feeder8.news.weretis.net!srl.newsdeef.eu!news.corradoroberto.it!gothmog.csi.it!bofh.it!news.nic.it!robomod From: Debian FTP Masters Newsgroups: linux.debian.changes Subject: Accepted lasso 2.8.2-9+deb13u1 (source) into proposed-updates Date: Wed, 19 Nov 2025 21:40:02 +0100 Message-ID: X-Mailbox-Line: From debian-changes-request@lists.debian.org Wed Nov 19 20:33:24 2025 Old-Return-Path: X-Spam-Flag: NO X-Spam-Score: -107.19 X-Dak: dak process-policy X-Debian: DAK X-Debian-Package: lasso Debian: DAK Debian-Changes: lasso_2.8.2-9+deb13u1_source.changes Debian-Source: lasso Debian-Version: 2.8.2-9+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1975326302217261453==" X-Debian-Message: from DAK Reply-To: debian-devel@lists.debian.org Mail-Followup-To: debian-devel@lists.debian.org X-Mailing-List: archive/latest/17562 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/E1vLora-00DaiE-1o@fasolo.debian.org Approved: robomod@news.nic.it Lines: 84 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Wed, 19 Nov 2025 20:33:14 +0000 X-Original-Message-ID: Xref: csiph.com linux.debian.changes:12962 --===============1975326302217261453== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 07 Nov 2025 21:10:39 +0100 Source: lasso Architecture: source Version: 2.8.2-9+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Frederic Peters Changed-By: Salvatore Bonaccorso Changes: lasso (2.8.2-9+deb13u1) trixie-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * tests: test that inserted comment do not change node value and still validate signature * xml: prevent assignment of attribute value inside any attribute (CVE-2025-47151) * misc: check xmlSecGetNodeNsHref for possible NULL result (CVE-2025-46404) * xml: do not terminate on an unknown XML node type (CVE-2025-46705) Checksums-Sha1: 5dfd88399aa49fd8f9287860426229cffa02aa51 2354 lasso_2.8.2-9+deb13u1.dsc a7744a8e61c3e8c0c197cbaf6ed9d8e239788eeb 4023587 lasso_2.8.2.orig.tar.gz 0d42bd174642c3ed263e4bb50d396425dc3f482d 33192 lasso_2.8.2-9+deb13u1.debian.= tar.xz 759dac6d4eff136b1ca35b62eaf295a9023469ab 7074 lasso_2.8.2-9+deb13u1_source.b= uildinfo Checksums-Sha256: 507965befd9935102f633bd4d98b888c34ebfa48a7d707d0fd87cd8c8a036d79 2354 lasso_= 2.8.2-9+deb13u1.dsc 6a1831bfdbf8f424c7508aba47b045d51341ec0fde9122f38b0b86b096ef533e 4023587 las= so_2.8.2.orig.tar.gz 852985305a4ad075d1f5218d2e0f572959ce0560683f4e21c24a71003c3948e0 33192 lasso= _2.8.2-9+deb13u1.debian.tar.xz c930ccbb0f69d4f82afaaddc1961153f03f2c4e1dc95291178c7f46c95214e87 7074 lasso_= 2.8.2-9+deb13u1_source.buildinfo Files: 4d6b118505419e638ee4537253055fbd 2354 libs optional lasso_2.8.2-9+deb13u1.dsc ad2e167973cc1c21cd16329bfbcd3d16 4023587 libs optional lasso_2.8.2.orig.tar.= gz bd936dafe6a67bfe42e52efdf8a6dae2 33192 libs optional lasso_2.8.2-9+deb13u1.d= ebian.tar.xz df50d4d2f17d88e6b977d85da021ae07 7074 libs optional lasso_2.8.2-9+deb13u1_so= urce.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmkSRqVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EUNgP/2bJggxseYN/iYPsZZfew6GU3BFEpu2J Mv5gai7HJgDB4GerxxXCERjWeA6SO0oifX5aeInGlSt+rRvmDep00zDr24oh5zR6 qerpiHI/G94ksy3U/qor4tKt9qA0Ed5S7oo+467r7mm6fzaWG7xa26qLzVzFyOLI WqrnwvCVZovcJIV3EfjOChOT0LaNktCzPiJaZMr61ih5zOK39qfrAHxuuDgvf3K6 cEbnLyECI8RNcGxswtcE1hHyLfqtRB/3607TiBG7x92HItPYOE8OPSF/gvGiJncL KrWF7NcAdytfzeb4BLKtfn5VY9ow3D/VaO0pKpACm3fOLfM44tDGOKiOjdNM1lOD HeAkdqY6TlJamcmAPRGmd8IjtU/wMbQZEkbQNhfaPljBaA3lGVh2GOwsXhuD+bup FA4Luim/ZwVsDrDJ6du6nYroR+hs/znT0ovsGg+S/d7lfsGROXWRNHSXQ+34C7GU DA90xRH9GtSO9gP/ysTjLSr3Bf9QwFx1uNojVbVIkMoXtFrgBE7r3cjsaT9Gm2RS EjAjBFHfkJKbSUB9YEY9dYF0UO6aJUVq0J1C1asQQeJuABrTUcY/D5Ay4LPhFfNl 2alIoPmeIa9MbC5QvYaiIu2yy6dGNkMtnI8du6Q6HmFKGatgzBneZr/Nrya5Y6zb r6RUllC98v27 =3DetKz -----END PGP SIGNATURE----- --===============1975326302217261453== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaR4pigAKCRCb9qggYcy5 IcFMAQCDC3k39+Q52SMygVzUn0EmGINZWlrPVgilhBnFPPEK0AD+IFHUE4l7/Lw5 G4fQR01Wu/pcD4KA/gkvyv3H8MPLGwE= =B53w -----END PGP SIGNATURE----- --===============1975326302217261453==--