-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Oct 2025 14:55:59 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: arm64
Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2
Distribution: trixie
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Changes:
 libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled
     recursion in XPath evaluation.
   * Amend d/p/CVE-2025-7425.patch to better reflect the original fix.
Checksums-Sha1:
 8f8892f1f6409b715b85c5ad989246c9b23b6910 1896792 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 bb67fb6cf020828676e1bceb8b591b6ae6d8e463 752520 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 6584dd5529ec3f08e8ed417e73440f61697ba13f 80620 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 1710a582c5001671a868b52ce8d95e4b478cd382 98808 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 cb304fcab1af199706f10edf15b9fb5585a5827b 9198 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64-buildd.buildinfo
 b258da88d64feb66f12cf995032e60ac46b1681e 629964 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 d400db5c950688a6b7967fad0836c5f57d123779 247432 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 527af1ea4627b9ecfb28c0f43498dae728df2764 187424 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
Checksums-Sha256:
 27588ea06519c97f6276a267b171f8095b73e607f923dd4f51c4a3805b37aa6e 1896792 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 117c808dfb3db9ef8379f35eafaaea0a8006f01eda8754ace5077ea7d29aecbb 752520 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 2058106676056ad0315a432726dfc32f0057d2f3115330b53941df972ee6db58 80620 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 31e71d19e532f820aaf51e73de59c2554b20bfada8d990cecdace8ac450c1c8a 98808 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 bff7462dbec8ac56efc9dad7429999fcdd0db7c7f92f91f766a185547e90f85b 9198 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64-buildd.buildinfo
 1b31fd169ea2b70fdc251981a010ad47eaaa95cdff0d95323a2e4cea0e1cb339 629964 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 fb6ac6e95d7b55f51597e4f0989a6689aea61a0e116749eb15c706d7afc6e1cd 247432 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 7c7ea112fbc8af1857dcc7e88410757316517d53e419670e60d53f112d7fea95 187424 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
Files:
 4221ea907fc6d36d0a36376e6e349418 1896792 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 2b35d528924de74995b478b3e582ceaf 752520 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 18589f7762c3fd20ad4f8946703fc2e8 80620 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 f7be5e4f145783eef39cd2c68ab8b50e 98808 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 46f748859a9ed1e0087d61ef4206094c 9198 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64-buildd.buildinfo
 39749f0ae9fc59716c258126622581af 629964 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 b1428be5f3fee8380c533d27b19acb8e 247432 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb
 25641a836521010ef2b275451fca084a 187424 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_arm64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmj16CoACgkQVLd4YzMS
DKGV9A//RTgUF0anRUz1KlzC5rEVRXv083ux13QqlbVY9SZHKPVXUmVM7t7omi0b
yLjwyiDjkqpvfMKi9TM/3RWJtjRZNWLRknqRMwmu6nVRKq8/DpOHIjO56azafJ1x
8bJ3BNN+BpqClEiBmDEW5mIynFHfzjjBwOYGqMn5dkgWfo71CduN2VlVGElCT0QF
z6D+QSEZQp/ZqhKWO6KOguzpcfV3X8qFZMhMQVzRnT3XyVbe/ySDVDoyVFZyP8DT
1QNqTeuejVh2ok8Ud+waFzMRz3QrsKP7lOqc3lcAisF0tvqNTq3EfOBXFzk11tvS
qF7rVIiXjDNhxwBR3Cs7uBGYXIDM3debch5llWpxxQ0+WtC7nRcBpTr+L9eEhYTN
1Te+S5bQjkkwA5hFx1xlP28XPN/yfdwxxx2saQKK6/35PQrRC0wFwaK4Hpi86NS1
h10Lyp0AG0VaI9fgrATMaSzBYNVOWr9QA6Jo12vRc7ChXUdOOdERQvo2oVnnohNq
gMzvveQhTdMFd/mX/w1ktS1H6jy4aHV9rs890wrmRAch5aitNBaADx23BaRl769o
jbymIH66u5U3xIuEEIe7ug68AdRh2htXgqLVYV6afsOfiY9GRPv5Nlv4tDzb92TU
wMVUOR5tlY7TfseccrpnzigRTfo121l6IEpAR5CKmic6gvzPYj8=
=24Wk
-----END PGP SIGNATURE-----