-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:41:17 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: i386 Version: 2.9.14+dfsg-1.3~deb12u5 Distribution: bookworm Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.9.14+dfsg-1.3~deb12u5) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: 09a530423565dae29dd41fff1a1678d4d786dcae 1710380 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb f060d66b64c83d67bf4c95b1c8e75865c609d32b 847020 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_i386.deb 7b6fd691319e1ef3733ccbdde75c9de5c1733050 71032 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb 56f21000d38283ef1524d91ec508446dcc90f6e0 99756 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_i386.deb 92560b0dd6a35f5da947fca7fef62c997523235c 9107 libxml2_2.9.14+dfsg-1.3~deb12u5_i386-buildd.buildinfo 692c9e7394e2946b050e8563f87c694c90c7c0ea 721096 libxml2_2.9.14+dfsg-1.3~deb12u5_i386.deb 00a838c2a4b949f7a6099baeeeec64083adc9b81 181720 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb 290518923d3986878a76a2e68b3a2fa02f1fd929 188900 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_i386.deb Checksums-Sha256: 8890301c04c9947d60161e87873fe109ef243a4397eef3ff341369235c58ef01 1710380 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb 8e40a091d7df2fca5cc0b2a5b80196992db298650cdcafd81ed0d56567a3cf75 847020 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_i386.deb 346881252bbe4a99ad87a7b5d424c782dd63b722097ce82ff4d11fcc9b08bcec 71032 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb dfd72ebf315bb9706947ed7a10d1e1da9d702d92f176dc39eb3bece2343c3436 99756 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_i386.deb 49eaa3d2fc77344e007bff56b3571ea459e8a90d3908cee0dc2c5cbf63c97991 9107 libxml2_2.9.14+dfsg-1.3~deb12u5_i386-buildd.buildinfo 2080587599c33f60687194db989d52d86527c58d3173896c4930972023e7bca7 721096 libxml2_2.9.14+dfsg-1.3~deb12u5_i386.deb d661c0f11f04373b182a72830affcd154dd66e17bff114c7f3da4ccfd7cd8154 181720 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb 194bdfe1021136de33555df42cb4b0e7bc44349c3680ce378fe929068f3a1f1d 188900 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_i386.deb Files: 286092de908dcb9f28c27cfbc74ae298 1710380 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb 88b1f5bcd0a6be0e1118b8d0f1fc25f8 847020 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u5_i386.deb 84401616086808f391ca37f3adef3b54 71032 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb 48333e1246c6abc01e4cd92467a274a5 99756 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u5_i386.deb db2c7d248550f618bcf3d54795c3fbf7 9107 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_i386-buildd.buildinfo 2a090ce30aa13dffa3a9524ed43ddded 721096 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_i386.deb d3d1989ec0d15015bb5ea1e47c12edfd 181720 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_i386.deb 6f621db276fd599c9464144c141380f2 188900 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u5_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEnw0rdzqckKx6dwRTEbCLukZn24oFAmk1vXoACgkQEbCLukZn 24ovdA/8DxgG0eahrpLi8zOi2QidZlqT7dAmI5ieCYhyioej0Sa7JwaR3BT52MZh XFH+gBbRcC1rbsxeHCn5n7G6PaGgxMBr49lo3kkdvmlZmS9RZg9KvmKMg6feuKo/ 7Ml5W+8GXvQ+S0+wmhcvCYqS11JSx5DdyMg10QAOf6kw3Osz4PkDxtcKKSfqrQRP t7JzlaPgg5P2pX7Q7AiUJOk2FQZlk1XtrWq4Oa9ce6VKtUNd38e3w1l2+8QoTVQA sxWt30nSVbWs1V7YIX0ULKTU5UikxVf582fB3XkkFwut3cZImHnjYJgILt3gm6ia kPtQIQap47S5ORf6W/foSoMcjiFZh3dLCXbKX/JCHf8NIuoY62KCT/yX2Uq9AiVB ycr9JDk/KIjDQuC3f7/QVC00NgR4gBf2OKbhdkOTX2julWxVc+/5OZgUvIj2VsSO +RDvCEucHfShTj66VP/Gs7JKImFtPllPdnSmBIT5yaaPKIN8BavYZdiAokHZPolL zZJERxINesUsoPJWI2mrdsi5wdIxFsOXbbyW+lBX5i5/9M+3rA3UZlfaP3zv7YuW mJNomNZXfydJ75KCCHw4IVPKwgS4JbS6KV3QBPCeDy1L0RxmH40BsvCuvEJzsgnI /+pOHZG38+pjcjYkNDE/ZGHOsNn0Mhf2/Jfus/lTIbM01bh2770= =RoVu -----END PGP SIGNATURE-----