-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:41:17 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: arm64 Version: 2.9.14+dfsg-1.3~deb12u5 Distribution: bookworm Urgency: high Maintainer: arm Build Daemon (arm-conova-04) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.9.14+dfsg-1.3~deb12u5) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: 19228b36fcb6984d0d814215f910c279a133ed58 1867964 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb d8588c167a7508f980e9cb0e996ffab0a45506d7 739688 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_arm64.deb 4d7f72aa4cb573348c3402a642fd1adb2bc26c43 80180 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb 4092a8407f261068ff1450229c3dae18d3ab8463 97808 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_arm64.deb 1e0b66d18ce3171302382f3420b06fda7ecab8b5 9197 libxml2_2.9.14+dfsg-1.3~deb12u5_arm64-buildd.buildinfo 25e82842005d7ef726cfb3248ef3daf19b22d692 620360 libxml2_2.9.14+dfsg-1.3~deb12u5_arm64.deb 609dfe13882a851fb5e7354073570c7c9d8a0c30 241188 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb 1c1fbbef4f9fc2c160cef992034ec5dfce14e1e9 184724 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_arm64.deb Checksums-Sha256: ba276572efaf74e4e85b15b1ddec9dda3ec4706a8b575889d0f7732e11f470a2 1867964 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb fe28cc95379ec4580adbd3a5acfa26a29fddc55481dbf75e47da72f82e766ff2 739688 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_arm64.deb b15253b9d0293b693b10a9323d6e5bbeaefaf8e5c8da41ef516f37ad44df0ed8 80180 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb a21856fba3be7165e03eab448d8df6790d00d44b1a3d15e3b70811b501e1fa60 97808 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_arm64.deb 299351d3087b4d6d025e7694764cd3d946bc0f36904994cd1b715a23c88a7b32 9197 libxml2_2.9.14+dfsg-1.3~deb12u5_arm64-buildd.buildinfo 9ced59b61a4535c52730fae9974d3ffade0fa6c1fcb06afa9069a2120ef798f0 620360 libxml2_2.9.14+dfsg-1.3~deb12u5_arm64.deb d1c402c11a9bf8a0abac4dcfbc210ffa8b34fcfd2fa13135f04db9a8d32752df 241188 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb 2b2e858563efe9f48b8d6abba8cf5f7d5e9a03f826e701769385a4039e264bb2 184724 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_arm64.deb Files: ccf79dbace102bd78874df02812c7cb1 1867964 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb 321e6a9c10f21a8ab966912841e46199 739688 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u5_arm64.deb 01364e121301fe73ca4c9346a40e7320 80180 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb de56e4ddd5107870191f930eb91a046f 97808 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u5_arm64.deb d8e969ddc14078129edbe82412696517 9197 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_arm64-buildd.buildinfo f3aa2cad653596b7c76a9bc6562b927b 620360 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_arm64.deb 4e9e148f3561f3b35c4650b70ce11110 241188 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_arm64.deb 010ec48f6fe95cc80dde209e526f9f27 184724 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u5_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYxmcRLDHP0tCCM0oScpU3dYulLgFAmk1ug8ACgkQScpU3dYu lLjErw/9HTAC/zRJRQSVbbRFMlOBX0GNtCKKXa+YkdycQzxuQXLDgmnrz4yygEWh Ur1H2G6A89PmMxI3ddUVOUtfi4EXXRWaWLotcYtw5Xwwg0hc1IcvS7tCSxuAMjcQ RQebcaRozgw4ge6O9sNITdye7u8wqH6cvyb7Sf96ju6l1JiupBLfMiGtVe4ZfWUp Om51op0S5qpph1onA1Cx7+DpZBUfe4acqs0Z4lQcf0Kv74tYKulXCkmlAtkPGc2M Og12p9r1HTw0WMoYeiiGQrHNLY7Z6jzu5ZLpzxEXckVMGkC6soKk82+7687mTvBS G8LYjyR1ySnUQ4f/+Cvm/T3WRKHDxQRbiHKux6mIbcAL6TCuraN9LrDU/GK3zN7g YlMhEG+WQhLsHSJpmokhShz/GANmcljcKUzYOuJ+MiHivdUvsNmHgAXqOM9zvtrS UeCiWMj5TL8DPB6BIr4M1aQh7BrcCpGoYyM47m/z8g/xcYGJkc+DoBw5578Hibhm xPfmnHdpIx9DcFSPMdw1Y8o6dHHDS6n0U28SCt/YjJr5Cfqd1osHInY2K40G4xkP 1Ttw2XTGfg1SCfFsiyQ0pfn/s1kOppy4YS8A17H65vnQ4xcRbkWVU2USxR1hYcrW slgrM3Un8VzoSo3nHt9kHRcBFSOlumbSzi1ifwNsZf0xoSsEf8I= =5eVO -----END PGP SIGNATURE-----