-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:41:17 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: s390x Version: 2.9.14+dfsg-1.3~deb12u5 Distribution: bookworm Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.9.14+dfsg-1.3~deb12u5) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: fd39d16f31f67348d22f367f53fcf7ef5f601e82 1870052 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb 0526499fd720858163fb6453fdddb4dc523502d5 710816 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_s390x.deb bbc9890826be50fef7c783695cf2648ca49eaa8a 76784 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb 2afe1300a56bed61d66b37ae6e722f35afb29e4a 97024 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_s390x.deb 30945a30bd4cf5b2d79066c042f79494c66dab7b 9085 libxml2_2.9.14+dfsg-1.3~deb12u5_s390x-buildd.buildinfo 7421a8826e28fe1b533eb1f0ddfb4a7e9103938e 605048 libxml2_2.9.14+dfsg-1.3~deb12u5_s390x.deb cdab753e939acfba95bb01fbf5a08984296c4a46 243620 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb f8ee9df8e44f4387dbcfde6b27dba3e3a0b0ad76 186940 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_s390x.deb Checksums-Sha256: 6b8e6e4854ee450bcc1540220949d56997a494aa4442eddc25cb0efb8958adc7 1870052 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb 19f85db92e117e82ef15560c729449e8b7dc18492810c76afcb223b26e2b5f3f 710816 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_s390x.deb 5ebc73250ec7dd0346f046c0894be416923f986481f7675018441f8f894ae541 76784 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb 735acfe34bff80448c2ad04fade99930c330c27c03dad130dc5abcc6cd2020a1 97024 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_s390x.deb 971e972eceeca728fd95fb34a2d33bf98012206feaee5009aa865b699274b1bd 9085 libxml2_2.9.14+dfsg-1.3~deb12u5_s390x-buildd.buildinfo 442e1025c498ffbf565fdd2b43741a35d6bde43bb0d269376bcd3fffe5151285 605048 libxml2_2.9.14+dfsg-1.3~deb12u5_s390x.deb 6399ceaacf4a767dad59e215116d48e414b8e33192a3afb47a8422fa795f0009 243620 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb 4ac351d59354ff8249950ebca7271c46a2660edb6322d10ed4f0d4477d85c64c 186940 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_s390x.deb Files: fe5dab3c293a21aad71ba4d8f9d3ca77 1870052 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb d56a100b3a0eb942c29706971e84512c 710816 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u5_s390x.deb 09439f04fd3cb7d3cdf90fa790884246 76784 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb e066954bec9ec4a243f028161f80c262 97024 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u5_s390x.deb ced42bc063901ad65953a1e2b205a118 9085 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_s390x-buildd.buildinfo 10baf87cf9b38dc462c521c330b49d95 605048 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_s390x.deb 187ca1c6c522a73097e367420a5f4079 243620 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_s390x.deb 6c009dc5477a3cc751f3e5b8d3a1bc30 186940 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmk1wKsACgkQkaCrxAR3 BY0loA//WMpN2ESJc9DNZHE2B8Y7qYO6ceIhjn4PJn5/2eoozT5hJ8K5AyzhfMtX hg0e1mpaUtbBIlpFIkL0nD1MUX9p0rEmsv05oBP0QFHWobmdbEuBf07up274aOTH IexZfL7SusxyxGgv499uvPJvxYKDbCElwCOJyJfPvYCr0gkUDAg8FI9hFLYdgtOk 2WyfaaP/96/oF7ag6ybXL2buVBXq6DZCeNDE345/jVIDsuq9n+vDWJCGR7L2QPxg hXlTLwsdzohrkiFHuYp20xrXsoHj02AZ3IPn9lKJMdUO9ZpjDXtcXZtLNGHK0RS7 EghxxQ/vXPxwp1VZrBdvS0JoM8rTjk/t8tArnhi2Jo2mPxKa1Abl44B/IyMgRlyl /eyz3HMWqQ76jR78X28G/HRVteTPImr1wVXd8oU7xbPN2VzoHd9zjKNkczJS5tKA TPkJPPnJHsFXBf1CQkQ2aEg2O/z8l9KxU4dJZXcyEQneFFC+OyLGee02ZQxM2+ow Eo8up9rGm7RoEdrFD7XsnqgeB/AbEeGzL959krbqaWtzrVIAPj69+3icPGsGWlWO fkMVFU8Nthzs4F6Ka/G+JED76GtXs3oSKRMNnBZpcI2aCqWN/z8n4O3aoh2r6bz7 /02fJR7xbi48rRKbZYj9PHXdLVMG2cMIPuEUNxoWhLprm/2TJpE= =sym8 -----END PGP SIGNATURE-----