-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Jul 2025 01:15:48 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: amd64
Version: 2.9.14+dfsg-1.3~deb12u3
Distribution: bookworm
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1107720 1107752 1107755 1107938
Changes:
 libxml2 (2.9.14+dfsg-1.3~deb12u3) bookworm; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-6021: Integer overflow issue in xmlBuildQName. (Closes:
     #1107720).
   * Fix CVE-2025-6170: Potential buffer overflows in the interactive shell
     (Closes: #1107938).
   * Fix CVE-2025-49794: Use-after-free issue in xmlSchematronReportOutput
     (Closes: #1107755).
   * Fix CVE-2025-49796: Type confusion issue in xmlSchematronReportOutput
     (Closes: #1107752).
Checksums-Sha1:
 246ca27840df062e0e92b86c999559724966e5ee 1865980 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 7889b3db20a72018db09af9c7616722020f41f81 783824 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 66d8c67a73f4515a53465df0e16b49650c84dcd0 77256 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 c8d46e1d9e0c4cb48aba53e4d12e7be8c5bd2086 99380 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 2251b3333f5a33a0ca9173381abd3aaeb67b6c4c 9187 libxml2_2.9.14+dfsg-1.3~deb12u3_amd64-buildd.buildinfo
 8bc2507e5faff46fa1afddfbbdb5f6a6c177cf6e 687400 libxml2_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 00da9d3710df5be21c439af8430120d3e2bea6b1 220572 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 03c0c6e5af55593c865b40289fc1014bb51bdb95 187268 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_amd64.deb
Checksums-Sha256:
 aefb6977645ab9a1a45877a42322452f5d0dfae0048344e411e625a5ffdb7e27 1865980 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 b9463f4485a4b5449965c7e80948ac4c8de39eca4e99f7ae8decdc8f61ebe260 783824 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 0b9f1e218f1749fb322b79c0877d551d66de56d28c5adcf87cf50d20d8c5b9d6 77256 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 788fa0fedf3b4ea5cb20ff2a666d4746c5311fb8bfeed08cbae8550d6f5103e5 99380 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 e3bfe9185c315b14455706f57c835f1fdd8df129a01f35601e09caf4ce5c8b1c 9187 libxml2_2.9.14+dfsg-1.3~deb12u3_amd64-buildd.buildinfo
 8cac7574bd081ed3ad7543440e32475b0023c4421a433eeff04df5dba1c979b7 687400 libxml2_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 590d94be6c2e7bfae5e7afcd75e3ef35175f7c1472771d01be2f595f5284bc75 220572 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 2fdac391d2c1c8ea9e81e821cfcf8ae30b98d15078f2b7e8f55b7cc4f79e9b30 187268 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_amd64.deb
Files:
 843b5959e12813b8bc2c8df229a3f76e 1865980 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 ee589a95f5c88dde878f38868a17b584 783824 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 2c1b0ad14b37b86f6f14cfee4e66d007 77256 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 8fcfc3ea4cd7aa0cb6cacda13dc531ad 99380 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 fdbd04bb838a164e471dd5aee66cef9f 9187 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_amd64-buildd.buildinfo
 16e8664c59edac64e5ec152f18d97bc3 687400 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 47b6696f21b5949e9a1dfe853ad37c43 220572 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_amd64.deb
 8cbb52aaf69667b8d89d715db29cb36f 187268 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=3WDy
-----END PGP SIGNATURE-----