-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:55:59 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: armel Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2 Distribution: trixie Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: 492da065a7b6186314f1271cff074d3632616a5b 1862748 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 8d834a4f9aabe6aeaff750145f41fb8b478612f4 704824 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb a20e01141543dce4388baa34631b8af71c111c3b 77064 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 012ef98104ca900cce29131f4edb6cbcffdd9b8b 98988 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 735f1997b74ed8f8bd3747b2da1267f4b33feee3 9063 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel-buildd.buildinfo cba73c201c12fff7f045efcc11707620503e713d 587316 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb b2586f197a618a69c7e1191fb2bef80c3f7275ec 255116 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 117429f6144cc3c2b0a0308c642a4e6de278ed2c 179456 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb Checksums-Sha256: 17e3ab9291afb3d464e4100a57af75980c4a529d10a2db15e0efc62c7eb4f6c6 1862748 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 349819d6fb89ddcc133a7e231c3f455ba628fe842d510580a8c8f602fd5a930a 704824 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb ca4d8edc9c340c1760628c5c5ed0009e4981e998af5973e6ce9482e8aad5e90b 77064 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 78a6aa2bd863fce39eb4fc7b6393ff34a62afd8319fe46ab2e422ceb8eb2a5cc 98988 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb d744994361db6d4f5a8e03d922d62d2c801363f8aa9f4458e367916082b138a1 9063 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel-buildd.buildinfo 301e7c878d7d3f32d866147f9dace1c2f162ade3c8f4e0bd79d3a764e156def4 587316 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 2a80617c2a147751db49114fa9e933835ba97cc4e12d01f571e3d764125adfad 255116 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb e3ef44eb26f7da272e3f48db8fae480743de9e5d637fa2015f92244ad455f308 179456 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb Files: e838e938805f9c9d830a54a33354f1c1 1862748 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 4cd88176ae008bdadd468d2f4db1724d 704824 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb bf17e565657c8e78f6aaaf667e1b64bc 77064 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 5bdb5396f1371cedc9f64e5993b7ab41 98988 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 7faa0c1f1b7b615fab38fb2a069c9b48 9063 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel-buildd.buildinfo 0887386eebfc426ad1b3874c04db9fb0 587316 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 8618f49a9c43326ac1c1704a3407c79e 255116 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb 842058669dc76f4850245f41114da6f3 179456 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegRwmIwj8f99iF4m4CwlMGxHD8UFAmj16DIACgkQ4CwlMGxH D8XvfBAA7yftQ5GoFxEuFqkhH+BPEQxYHKk2IWVG5i0RFuk/hVWX4IsdYXvGkaNw nofkQ3o0NFRiK1ORsDNiljljRP8XUdXCM8QlZoCMNGn57c0c0CtEiJ7GMTSRhe+f bcP/mYIEHdLbfFrFCoyPVVFzAZ8ptwaljWxMCgR8lyAiqkeksFUM3lPEFqUtBBAC Tko4+RrgTX4vcDb0fcG1i8Q0hGpDpaWRysBbqFdEICVy+AXetVK08NEcQnn3vIOl chSSDnfA4z/5ugS/gYhbG4Gbq5Nz4ZBmSBr2I7FhEe86bqVa8brh3NBzpPsVLOym pY+FUeTJNp+DQvvOr8rZOtV4AhD9/dSsdXYid1WLRcOVUsKGSJ+MB1xTyOqyxmCm cDkq0ppQBLjBSdZeUL4IiB9oRiojSImrXiktvzCJ7/xMiurh5x9dLetXVXQlbBwN vKHDVH0gPWW4OFJdA6fAlhlMfptkGLE51y902CBzA1kCM1Ga/sZeCnPslsSvAFfk 1QQGxU2vOSE2+8De/GGaehE7KDiQkyBSxsggCYSownBDY1wnjethaB05pRNP2d5G Y9N4qc5eGqDsWAUVPdYvPzYp7f4xye1JmPvrS6Cf6bTdP6+b6ZzX7ZRr6/82ovrK TLjGjxT+M2PZzlgUOtUEk7KMMG3tUyDk4xLAStyaE1F5iDHsTpU= =ycZo -----END PGP SIGNATURE-----