-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Oct 2025 14:55:59 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: i386
Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2
Distribution: trixie
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Changes:
 libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled
     recursion in XPath evaluation.
   * Amend d/p/CVE-2025-7425.patch to better reflect the original fix.
Checksums-Sha1:
 8153cf8fab34fc44903beee5e1ebeb67f5697e86 1744196 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 a41fef2f5b0596100d999b638a4b1878b2906924 856524 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 9a3eb7088439d35b074eb10b76cf8e59d291b3fb 71448 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 d1d3650cbc811a98c55871d314ccf33a2e294f84 100600 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 f4248f828c1bdf8f574bcdfb2bf898af40154cca 9100 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386-buildd.buildinfo
 824981dedf64ea2f9bf4fdcc61d21ea14cab3ea9 733328 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 1f2ba0b91eb1b015b5a6b2d26f9196e9b87549e6 187712 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 348b6a0fcf6150aabd238c0209152fb097ad71aa 190192 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
Checksums-Sha256:
 184f2dcbdce2886cb76bbc1bdabe907c98279494224ea05aa89e8a01e96c0ec2 1744196 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 514ec135474ba1d470c032fb5aca91fed6c1a22778cce4afd2faea4cb6cd041d 856524 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 180b78b36beb4974f46b7fd450bd0d1cf8a88188b2a9bd2cd011a5dea3d997fd 71448 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 71ccc4997c9ea6f0d5cd4462d59de35b3b8549ba7f6ba7ad988d82553e837e33 100600 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 79b2bd75498278de74a0b2160a18e9bca689ff64d818b7dc76014d2145817a99 9100 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386-buildd.buildinfo
 915e1ac38761faa530db7deebe3aa1cec2d62d28bf43e67410266688fdde6f49 733328 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 ea2a7ca37881e12dec785f9664b1e14f60238b02dfff62619df873a82a54e609 187712 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 f000689da224c7c883cfa6abdc1bcedd4c82fe1d5f3b018166b20654b20060ea 190192 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
Files:
 9e06c9c74de1d11c0fea4e9ceb08b771 1744196 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 d512fcf18cd7222d2d46be4e24d06cbc 856524 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 cf0b01ae919130c171e70245f46b1bb7 71448 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 5e9fdf1cde1ab36fb8444117eb2f92d8 100600 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 2db4764f6d8b55a9bdec8008e349433e 9100 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386-buildd.buildinfo
 f2ed95c5fa57977ae472f30c914dcf1f 733328 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 3d572f7c2d7581cce2873cacba6a0c70 187712 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb
 b4151b3e47fecef2f7afa438f522cd6d 190192 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=kakQ
-----END PGP SIGNATURE-----