-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Oct 2025 14:41:17 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: amd64
Version: 2.9.14+dfsg-1.3~deb12u5
Distribution: bookworm
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Changes:
 libxml2 (2.9.14+dfsg-1.3~deb12u5) bookworm; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled
     recursion in XPath evaluation.
   * Amend d/p/CVE-2025-7425.patch to better reflect the original fix.
Checksums-Sha1:
 03c3b05d1e82662ee6bdc1289ef03c2dc511b12d 1865256 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 88bdbbda6af466ec885647b6aab8b28901c52616 783848 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 e99ddced71f341e49f00d23c129a9ff34ef7a00e 77236 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 fc9d6cf3f9e2b47901c0ab4c661678da44987b76 99628 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 34717ae7f4ee121ac0b492801f3a351e444c7a2b 9198 libxml2_2.9.14+dfsg-1.3~deb12u5_amd64-buildd.buildinfo
 fb680060d032fbb0cbe5fd9fa8458a015b3704c3 687804 libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 4f8b60178dc45861df84d6dfd1d95794e4335964 220640 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 0d46b2845563fc7b53f8e50a954db35eef80a79b 187612 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.deb
Checksums-Sha256:
 56aeffe667a026014a007a5a7b5850bea6a52a9b2298ae3b08783902eb277562 1865256 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 cfd00f214aa3eca697d0361abdcb62d09166876bbbb55741837e4204ca932000 783848 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 77992d33dc17e672f8e260f1ce36ced6d987cf8891a9cbcc0d1bd35585fd0012 77236 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 ab84034f8e998eab33c6cecca47520b1b57b22a7f1e039937e70cd042eb67406 99628 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 7020cde71c287671dfb886c24de38ef4324cfbcd8547c202c5bbbd4dda85e8d7 9198 libxml2_2.9.14+dfsg-1.3~deb12u5_amd64-buildd.buildinfo
 261ad120adf02d9bdef3f47c486e016bfd410cdb1ada9730a8f9a6add0857bd6 687804 libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 dc4500cf774d92677b9980af9dad509896df1ac5c12e247d0d9ef594d2d4d43a 220640 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 4c49eb4fc86f4addf17d54dfd04edbb2bb3a04f9c9894974bf7cf269cf0b1347 187612 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.deb
Files:
 cc93e2cdbac87723027ada80ce992b28 1865256 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 4769b8dfd352ec6611ab64eadda47581 783848 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 f4977ccfe8e4242f882642348f545c4b 77236 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 3774aa12205237b6d447d3dd8eb350f8 99628 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 5be7ebb77410dc80b0f56e4d56289e17 9198 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_amd64-buildd.buildinfo
 e1df634098c4237ced81275972800ceb 687804 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 31e9b348e6945d1f1e502d9d167a9777 220640 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_amd64.deb
 0ee19346b94dcc9552ce4693113ac011 187612 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=yH6X
-----END PGP SIGNATURE-----