-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 15 Mar 2025 14:53:42 +0100 Source: libxslt Architecture: source Version: 1.1.35-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian XML/SGML Group Changed-By: Salvatore Bonaccorso Closes: 1100565 1100566 Changes: libxslt (1.1.35-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix UAF related to excluded namespaces (CVE-2024-55549) (Closes: #1100565) * Fix use-after-free of XPath context node (CVE-2025-24855) (Closes: #1100566) Checksums-Sha1: f5883c1433c3906a830ccd15ea819d9332f22a9f 2343 libxslt_1.1.35-1+deb12u1.dsc 9e4e7f884f8ac88c17df0f9475201bef985d42e4 1827548 libxslt_1.1.35.orig.tar.xz ddf0672dafd3575e2ea829c7ef6e69e05ed8f3dd 22944 libxslt_1.1.35-1+deb12u1.debian.tar.xz Checksums-Sha256: 542b36489cdca4a13dc1bb383842f9c7c1d7169d8d30a100367372fe5fae86c6 2343 libxslt_1.1.35-1+deb12u1.dsc 8247f33e9a872c6ac859aa45018bc4c4d00b97e2feac9eebc10c93ce1f34dd79 1827548 libxslt_1.1.35.orig.tar.xz 4d8717f10aa236e08219f495881065d15a7115d61536d4865a67274bf442a8db 22944 libxslt_1.1.35-1+deb12u1.debian.tar.xz Files: 09bec485675dd2e0b9eb03d93c9b7ea2 2343 text optional libxslt_1.1.35-1+deb12u1.dsc 5b3a634b77effd8a6268c21173575053 1827548 text optional libxslt_1.1.35.orig.tar.xz d6dfe82538724b37cb59eede91d499f6 22944 text optional libxslt_1.1.35-1+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmfVhuNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Eo5kP/2CGL8XiFDfL1f0yk8jvgSrOtukPVbMK Z7vPxlh4OFSTEiNKoYRqrjaDz+ejXRn0jNqOy3zo38ejqCYnJIvpBupoVJVj6WJl WiR/rSfpxOzNLMGnKIhJBwfDfn8wWEx38R2uQdILRQzewL9ePHPngpUoHUYxbx7O V6dcaMQhhxZpjC29nc9//PxlGKeI7mHhoRs08oYgg0dKloMc/KYmDm3CSQcj4gai VdlBzNeuFnnHzDaatxhNTkpzafSgeWzARgBhQjhjiXMvL7vBhpte5gfSEMkRRpS5 ECbtjlo+tc0UWpzL/FvmHDtqphNOI0vPrwtM3wRlUw9qOK3pCgv2V/akWJ3ooe4d Ev05Y0Fb3giSZwqYzKdzV05k7zwXsw1DAFnMlUiB73GWFJ+D7xyktMUF48RBq5lK L8gLZrdvnLVJpc2dFs/kpwXWIIOnltfDmHX67jVLEBQg2EitDCViC/uu0fi3LaJO ipqu4ZluYGtzOdYUnabnvQZYs+5SZS8Tdpewc1i/gIAGMAdGncq+/j6i9jtjQjps GAxwSLiovNnBo5hZthxXtIsCURtM2uyKBsQCFemfNxnZPmen1opXqxUXBy37jp+l PcZMRbK0YSsRllJ/RSRStEH3j5qkI2jbXicGrfDHAdv1oFDkbH9TwXLEcpDHTBIb 2rmMVisXmI4J =gjb7 -----END PGP SIGNATURE-----