-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Oct 2025 14:55:59 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: amd64
Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2
Distribution: trixie
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Changes:
 libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled
     recursion in XPath evaluation.
   * Amend d/p/CVE-2025-7425.patch to better reflect the original fix.
Checksums-Sha1:
 de31aec7f2c5ef9eeb1069a9cc6cff31315ddfb4 1894988 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 1710c7b5cb6996a1d5b1c479a1f0b0f327187270 793696 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 7fceee441399e2002554d55c7e5123dce4274647 77692 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 373aebc99cd17fa592b2de66f64573809dfb038c 100404 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 60420b13df1a755ff753556be155a5dfa29fd492 9214 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64-buildd.buildinfo
 84aee5550e19780d145a222441c021a406ad659e 698368 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 cba53f8c22ba9180010c1138490397e4c2cc77ed 232076 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 9e9706494ab1f6364aa9278c162100a1cbda5702 189468 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
Checksums-Sha256:
 ac4475835f2d25a374911829432a8d77ed8206f4c3b5ed31bf0e574622608c5e 1894988 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 046fe55de1c26c41e076d4a2a21cf73293479eed7750cbefce2e2a3c6f28906c 793696 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 6e636601364869bcbfc43fc3b48b2c36c878d051ff3506a5cd0c8e58ee63e9f2 77692 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 6a5ddf050594c3a2ef6bfe7072b2348cad55715e19c273664ceab68075a74034 100404 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 463bf52ddc3d0ca98f53be56a316f0e7f5180c41eb591c588f60226dd231f0c6 9214 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64-buildd.buildinfo
 a0e9f2a7703d426c9f2f70c9b0112705cf141067ae6bb517e3faf070dcb2076f 698368 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 a8fde27b7f0239a12e77e1241037a6bc82014dae665c5325ea450e138a007591 232076 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 09a923b47d8a63e68509a5afb192f73a92846d77f3953f9d9859a19dfdb628ab 189468 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
Files:
 421931f7d24023033489d1e980255b8e 1894988 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 582749e9e445d414478eef2cd1983311 793696 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 da103e4e4c1ce5aa26298853b31c77cc 77692 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 8f85f1f23553a8ff4857a897d05bab2d 100404 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 05c409ab9741954103e7564855a1064e 9214 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64-buildd.buildinfo
 f878bb4cc2546a452d1bf9cccaf08536 698368 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 ed55bea2c30f2d1c831125b3f4be6c67 232076 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb
 c6c99d672b7c5a6f8976df94e3ccc71a 189468 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=aKOu
-----END PGP SIGNATURE-----