-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:55:59 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: ppc64el Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2 Distribution: trixie Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: fde6b882571a85a233891c3cd9161be0c620da82 1999408 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb a95b9f51afeae3c789e3d8dec869d5ec4eca1a29 864424 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb b0658c4830a0f0bc4fba42f6c51ef6886cdbfaf4 81028 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb d876a63a2cd6d4fd45ed5242ce780921a8c9eb27 101536 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 7c9610c46244ad06b613624878021d839d5ce5dc 9243 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el-buildd.buildinfo 5b5159d05eb21e5fef924567d973049d09f1dea7 730036 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb ed8baf5daf13bc17466730d5f9c519231e79a619 254716 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb c64a5aa137c8ed6040f5d96cfcbc6e2fec42ab84 189720 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb Checksums-Sha256: e857366ffd63aa31f4f078d3286331d7da7a3fe53471453b003b476983fcb0d7 1999408 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 09583a535995b8f6397b27f07bc2270bc2955839f647caceb94b47d646dcee66 864424 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 8325c05f0419459df5b79bc14dd4cc361484ae88aba80afdee1805400c6536d3 81028 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb dc4fb956a080aa542e8ef6c1c2c5875957d42d8d1bebb06ee951d4f2c399d12f 101536 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 6bd39f7f4a001efb3e9c49c1c98028afd59a8b2907483fe4a1dad26b26567342 9243 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el-buildd.buildinfo 64699d4d89cc6c4211f10526234e2412b38d89371b2e4d240fd6d004a0031779 730036 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb d8301adc11d423d538eba83e197d953b4556dcbf132512641e2ce4d334c6a0a7 254716 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb ea89ce6acd1359b8a3ebb58bde61b7146d3fbfa7be5a85008b85e0fd14f966ec 189720 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb Files: d0223ff36aef97fe38677440360929c9 1999408 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 98219351b8e45eb1b00eab2c39c8bf9d 864424 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 7e7070cd6bf24f1d3668b2a83720cc4e 81028 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 2b8fd219b4904c129efcb65ba95cc571 101536 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 400d849cb0cfc1bb2925d6e0cc1afba2 9243 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el-buildd.buildinfo 24e14d17e7ab8256020b8ef2bdde2c72 730036 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb 425bdba5dcceaa249c55e80443364098 254716 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb a8e0373813cb6b87a5644fb59c42f991 189720 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZAv/jpGRqS40qyb11oy1TpxF0ZAFAmj16BEACgkQ1oy1TpxF 0ZBT8xAAtusmJQ+qu0pOoDHr8wFS0nh06wHNYrGD1v73XO31GgWnLTr6+XrgStEb ZN3qNLsET582dhiR7rnyUn+O0BEJsfeTnnUEhRBOODO97Uvjq+CFnz4BHTA5opxk z7Wf9J/PAgCHyCJOpKnvq6LBU9Gl4wj+dXQmqCJF5GLtloN9pSe7E6vN++M5IkZj MQP/V8dmODv2O5zWbzNQoOBQ68fRNsejBKhBaRUq+vS2LfcbDiM03LRyAIMMeq6m bJumIWpaF0FnXsl/R/LxBpZfw6HG18pAEYvmQLGn9Babb/B2CDK+Xve59UBzmHWr Wv6eeerR/P4sl9DGPeitH4qcY1tabioI645HgAbYAELlKYCb0B/NOghzzZMwpi/g NYUlptiSsvXo6qb1krwCHnQggvd2IECyuZnDkpvYp8ngfs7KC7+3SV1QlFcZNRfq SxyVZaEjmq664CPFic00F+LNe3YDkac9EJEaEST1nmBAw9GbcMMIKBWm5LECR+kQ Gp7dCu+DKdcPRIoa1lYJqre4vbG6a2LxtuJiTuYlSJEwGra4XxmVEMsUAxA0Fql5 RLts0yODIWdgADhf+nGJKcHA7CwI5StMmC2iMO4vPE+xpehAGzXiIPNv28Q3h2vI SUvMUfiD3qQwkps94MguK0zgMe7NhSp296Sm+K4LffiAjg3K96g= =C5Tx -----END PGP SIGNATURE-----