Bug#1061473: bookworm-pu: package tinyxml/2.6.2-6+deb12u1

2024-01-29 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2024-01-30 at 00:07 +0100, Guilhem Moulin wrote: > Control: tags -1 - moreinfo > > On Mon, 29 Jan 2024 at 21:55:37 +, Adam D. Barratt wrote: > > > > On Thu, 2024-01-25 at 04:45 +0100, Guilhem Moulin wrote: > > > Fix CVE-2023-34194: Reachable assertion

Bug#1061473: bookworm-pu: package tinyxml/2.6.2-6+deb12u1

2024-01-29 Thread Guilhem Moulin
Control: tags -1 - moreinfo On Mon, 29 Jan 2024 at 21:55:37 +, Adam D. Barratt wrote: > > On Thu, 2024-01-25 at 04:45 +0100, Guilhem Moulin wrote: >> Fix CVE-2023-34194: Reachable assertion (and application exit) via a >> crafted XML document with a '\0' located after whitespace. > > + *

Bug#1061473: bookworm-pu: package tinyxml/2.6.2-6+deb12u1

2024-01-29 Thread Adam D. Barratt
Control: tags -1 + moreinfo On Thu, 2024-01-25 at 04:45 +0100, Guilhem Moulin wrote: > Fix CVE-2023-34194: Reachable assertion (and application exit) via a > crafted XML document with a '\0' located after whitespace. + * Fix CVE-2023-34194 / CVE-2023-40462: Reachable assertion (and application

Bug#1061473: bookworm-pu: package tinyxml/2.6.2-6+deb12u1

2024-01-24 Thread Guilhem Moulin
Package: release.debian.org Severity: normal Tags: bookworm User: release.debian@packages.debian.org Usertags: pu X-Debbugs-Cc: tiny...@packages.debian.org Control: affects -1 + src:tinyxml [ Reason ] Fix CVE-2023-34194: Reachable assertion (and application exit) via a crafted XML document