-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Jul 2025 01:15:48 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: mips64el Version: 2.9.14+dfsg-1.3~deb12u3 Distribution: bookworm Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1107720 1107752 1107755 1107938 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u3) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-6021: Integer overflow issue in xmlBuildQName. (Closes: #1107720). * Fix CVE-2025-6170: Potential buffer overflows in the interactive shell (Closes: #1107938). * Fix CVE-2025-49794: Use-after-free issue in xmlSchematronReportOutput (Closes: #1107755). * Fix CVE-2025-49796: Type confusion issue in xmlSchematronReportOutput (Closes: #1107752). Checksums-Sha1: 5b2d249d15dac83199f4e4df6c8f1e04e94a079b 1989172 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb f6fc114907421f2833f986d5951f7b223b9b0b47 810972 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 3299ab6f655c153e2ad4bd6eaf67346b62213475 81124 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb e2d6ae340b7890411b1da2dafdbc16f72cf909e8 96728 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 78332db2c91fa6e4061ca5240d8e4d5077f433cb 9036 libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el-buildd.buildinfo 185ea3d462fa4b6bfa5331db30ae9141636b17bd 601456 libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 749324526fa09174163efa0e71ad1352522f5599 260288 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb cc56936e1c6a5c1984ff083036ef9bbe9ef24b63 173904 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el.deb Checksums-Sha256: d4eb96f341eeff0bcc65044b4c347e88d5a033e3c8c068f7f6c91822a5f03c77 1989172 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 9285f608d5eab0c8055b4bb6befa2ea50f72c8fbaea45867d60712b86f15d50d 810972 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 6afed26243cc1cdbebe91df4eee422c7501304732e754600daeaf9c50d21a6bf 81124 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 23a9d4e39eb6f530e23ec99dcf311910f5bf0e69cca3b2b2894e87d350cf4fce 96728 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_mips64el.deb ab35b6345af6021e5a19762012d807d0e2ec240e8216e91a1b7744ad007886b2 9036 libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el-buildd.buildinfo c26df2e5282602bf8a30238fc870a720b0a2f58a08d70a84ce85f4e836c7982b 601456 libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el.deb ec4d1333556b0711391a2d6771eb04bb9d90845ef786434b9059e2271407b384 260288 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 1a230b60dfc950b236f1f6253a1ca744b00f75e5ebaa20f4bae6c35cc51e3f67 173904 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el.deb Files: a14f0c9b7b831adc965d32b821e4526c 1989172 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb a1a055ae96fdd5395d7ebb8752428501 810972 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 6cc3710bb168525022da355bdab33c25 81124 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 454caed71034d59f3c2b07cbaa47b52d 96728 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u3_mips64el.deb b3006525d84ccd5a4c73f533b3d65276 9036 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el-buildd.buildinfo 48eeccfde087104f5373996187758c83 601456 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 3b7b02d8c0b480959c4eac1e2f62f3df 260288 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_mips64el.deb 92b6a13b15bf681f065796a82f25e82a 173904 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u3_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmiH9jUACgkQmf85J+x5 /aqa7A//eu1LynB2OfmraR57ySMSKF8H98kSdQPrI9JuZ3uSd+z/JQRJ77VGqtVY ihUTRxZ+mQ3JI1WBytli//3gJDlkIgImlLJ83xlRKMjvXkT2cklDcV/PRNWpY2cK T06BkLyY01gWlto2Krpj3WDbi4rLISPLdRSJWIELjn3S61SY9lldvC5iXnZ6gzHu LWIG5CQQlv3BnLOPN1MJhFAySV2sn/moRaPdvQlAPIv84asWMsClYscv4P6Zo/SO iFzdwa57agGu6CluCb/WyIJOz9QQJhKZONevx30F1+YpBUglXXiUr6pn38e8BmX9 asA5FVKc2eZwWTvkJPgRDbk5xByikEdG+wcVDBNqRXE38gcIVz4xlzviax+0qfip aY1uVB10gzxfVsjKClgQQGRoCz5TIUB0aVteZGNnjU964JjcG1zRctlZueoJTGe/ Re4Fo8KvmZ01g8ApbtBZuqPsb5LMML5piOcK+awIFQIWfLjQcfkKlkwzhvZyFfnn /+2tncdlYmw8bSj4a/bQ+ttyHe51i49GFNIS7bcjhhZNyHlQRcL0k80BXMMcqx2y i6Dm+s78DCWyPWDHqudt4M7Y0n4arQC53fHM7J2Jmu5vyQ+EpFi/KQwU863ZJQzQ khuA+/ol/SQp2zG2Z/SlT8DUyKRpXYNE6aObV13gz5xNV/5wYqk= =1nvs -----END PGP SIGNATURE-----