-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Oct 2025 14:55:59 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: armhf
Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2
Distribution: trixie
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-05) <buildd_arm64-arm-ubc-05@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Changes:
 libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled
     recursion in XPath evaluation.
   * Amend d/p/CVE-2025-7425.patch to better reflect the original fix.
Checksums-Sha1:
 3210b439f9743e5a84cd3b7db2962590dba97395 1912560 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 29a9a397a47b2d1527580558f565fb9554577fab 723636 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 e04e1e3b0c7d6f0b82925649d77020ab4fe24c3f 77396 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 a31e7e6002cda794ed8edc4c81ac6cda1c377187 99556 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 7f6ab60478a2d2f31ade4de1d77bf405ab4f226e 9077 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf-buildd.buildinfo
 d75deb82f122ab562fbcae715c86190b73b1306c 604824 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 dcc7115b99eb397c395f230d6759445858637654 254532 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 3740f7e32868c22ad192dc2bd3d4d9bf8faeea69 180252 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
Checksums-Sha256:
 569e743ec5b886b1df7bc971bee18b6e205588719f794f001f7cd1e103d6c9f2 1912560 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 1dec8b4df6b36aa7112820d5c8295289033a2d56bafcb70c891dd1bb9f4bff94 723636 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 d21186c29c68ca0a86d88ff2951072ebf9bb679135661fc7ec536824006fac23 77396 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 048428a727fd0a08b972d32f887324d6093fa3a66139f77d6cf050a55c4685c9 99556 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 bd7d7f5a6b09d70d733ea47b1b01a5674312aff90dec1a40430fc3ab60fd760a 9077 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf-buildd.buildinfo
 de799189ebf35b41bec42cdbcc625221f36e1e97f3f4b8637bae3b7aa05fd5aa 604824 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 a8debdf17771d4df8f598238fb8edd1cf20159fe0f23aa0e7c13592b76da7acc 254532 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 a854d84679bdad16a7b62a7062d9b2a306ed5efa0cc59d12b46844baa2ab25e3 180252 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
Files:
 28eac86d0d4fe8a59fe3a16e92490b40 1912560 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 b2fc22039452dcc40768e09e73279f03 723636 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 8b9cdf5c5a59c57a3b2289e42c1a5fed 77396 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 5d076aca397baa715810bba4c13306f8 99556 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 1bd1bb7edf7745d5e650165a8b1a969c 9077 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf-buildd.buildinfo
 4bd20fe882bc79d9d9d8a89405bde12d 604824 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 fc7438dd0ab88de00d3b99d66d29667f 254532 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb
 041e18500a7db62e2bd3839229627c25 180252 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=iVe9
-----END PGP SIGNATURE-----