-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:55:59 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: s390x Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2 Distribution: trixie Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: cb27398a1f94eeff7f805732696c009a901c6bdd 1945396 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb c8840789948eac90130a5ca23b042cf258ef7f3c 781364 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb d3683c7968d000c274ebda943a4d6aecef644d7e 77732 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 8ff42b6f404f788b3e468c11827d7fa7c9da5bf3 99772 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb bb2b01abc305123ad0347f224ebb22daf8f94de6 9073 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x-buildd.buildinfo be1f1818c4c05a863af5218c430976ad404bb096 671140 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 66cd0155748bc1ec86c2422488ddafb17a2a48c8 248796 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb ea455f4d9bd79735efeec2a18734f043d3c6d9d1 187700 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb Checksums-Sha256: c07719c5aafd529d70205bca576af42e173ed3a5941bbca5f304b946179c899f 1945396 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 535865c5a6f05176fb1a6273ae9dbe68e1d49a66e5d61a85591d7a326d81e0ec 781364 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 927ed861ed804ab6d5cf0a6e4c3cdc96147bf83a67c5940d12c952dba67fbd96 77732 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 1a585bda6b8eb4521c238f2ff03f9ac0037c2f37a191adb4ba227f01eb458d7c 99772 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 582ecaf79f15fbfd3b8ad5701fa528a42f876e7b2b8aa32ecfc05dd1704bd80d 9073 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x-buildd.buildinfo cfa9e6570f0479e85bbfc8678b8278abf8ccdf8e64bd0b7d457f8eb4a8b0cf21 671140 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb d99c425b94c9a3e2233d39cfb083c577f25f070a4d636bac570368678dc3c6c7 248796 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 9ce2823a01f848e0612b4a0dadb8a27c6f05dbc4431ceea9629adfc00045ab7a 187700 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb Files: ff10c198adcfbf7c3c837fd128602942 1945396 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 18ffa78d77235b03bf399b7e53ea7b15 781364 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 80a7baa32d993f4043f0daa286ee855b 77732 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 4dd668fdeeefed99534458c142988791 99772 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 62ab1c14bc77f02785fe392809f4f660 9073 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x-buildd.buildinfo dbdcb4d9802cd5a46781b70843a8428a 671140 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb 7951e96380e686b5cf92b2cafa7b9edb 248796 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb fa69b163dfaf52b256758e430a7d9c6a 187700 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmj16DMACgkQkaCrxAR3 BY0VTw/+OV36Rp135xU670ghZT37g5roXoPxxQ8Go9ru8GbSJ4WwLBj4PRRROi+f 84kDvcBT5JoTKMVC6vUBy9D6+EmQQJ3tzPalMTH7Xwxt2mov+iT4DK3KNIpdPB4P shyY//+kln8tc5o5/uxaDXGZsqKCc3xo2vA/ioW4pRkILEmF8bRm9yU9Kcrymy15 WgcYH54C/Rt0F3qpUERom8PVl2HGm/6Sq38xn7GtjW0OPPie6OJjDQR+kRInSVH7 xOiVYA1qXgD6luCZ+br6iOlqziivh3W+n9hGM+vbq+IkdpmuXhIV4EK2msYydoMo 5uEj+67HHkle9XxVCpGRFHn607I5uS/ybQP/YWt/AWf+p6CUzz/AT5kIsuzTTQz8 /IJnRvlCs0KQSTYPmarTYiXk929JjEWfGi+9JOCMuBFS5tE4Q209nHcYPkq93ZdI npsQqnmADLdjRVFjbG9VZ3oebidcd4vCAGGVIakGmOpCvGlKcaHlOZoEjpjycCPK rmQBvaS8S2wUk1f4JOT3Fj1/mOmTy8Osq20O5995/wsPGaC3fE0+kVqI/UqmTTkD Oi5z0p7xUdfGI5ZYxtqC8aitxPpw6Ty4mAsPUQ8O2UBGqMpal3Q9QCmpZ9n0jK/m eC/4Q/8h8wVn/DUX9DHpf3FR72XDV8m3w+OgN+vJfifyerNUmkU= =Sxy2 -----END PGP SIGNATURE-----