-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:55:59 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: riscv64 Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2 Distribution: trixie Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-01) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: debae031aaf897d7a6d976e706348cdeb407b1ce 1825532 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 9e2d64ffdeba5f02d7b0a91d2f8744dc1d98a540 1952296 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 7a3029b069581377036b403c4ddac5accf94f961 76828 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 7bcdd757322e739c3923e73d3a5b895ea5432f3d 99744 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 935c527c05cfb5a423412f3420dae80ea9a28239 9188 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64-buildd.buildinfo ec2e79e913f0c046fd06ae49a7a756d387f8ff68 708668 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb e4b9791ae753068112713272011081223877246b 226776 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 9cb2d5c95489a64c6cc26c3897f8a69b13d20adb 190060 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb Checksums-Sha256: 4b90bfcb70d89d21d9dd504ef9aa95369a1b215002d98ae2270cf268edf4395d 1825532 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 22413300a217a191062b0ad431727429f97f685f3143d32485b9d9cb483a73dc 1952296 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb c3ab5a3a8edd48223930178b85ad163a6e6dfc62d843e601dc2e012a39b7c165 76828 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb b82c6898e76f725bae06aae8cf5f6b77d0796b39359d5c4f5bbd7f343117ab6b 99744 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 30289b9997122ed2b7936d3562fb219bd26e5e0782d9dc63368059bea310d53e 9188 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64-buildd.buildinfo 809720badc94b0441a79bf0cd235c828d24aa45999c35d386efffb0f91815b02 708668 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb c015ee3173629b18a14a3048f4da76ce957eda4590ef6e20e055d748cc785db9 226776 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb ba67084f906edb307cc1beeff903a0b47b47e9cdb30c9b83e94b4578fcc7a04a 190060 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb Files: 2ba64a84dd9d42fa3df4cdac7fc3b9d6 1825532 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 9406ceff0cafe3eec83c628c7ae98944 1952296 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb f1f269a8f2c387dfbdaa50e990369068 76828 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb be9671fd91c3185ea9ffb46bf47bc2cb 99744 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb 8cec223e20dcb44aa314eaee993f49e1 9188 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64-buildd.buildinfo 115a8ad65fc085a7754f525263855809 708668 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb e02a6b200325106f723ca41eff11f7ad 226776 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb f78a19ee76522990ba1a24ca98b994d4 190060 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEr1DoflQE5rwrZmkOdH2L+FrKb9gFAmj168IACgkQdH2L+FrK b9jURxAAjLtO+yh56fRPu4Pyzmv/fSBj+oAyxTP9CUgjuPcXtQZDAZKKjcdkcQaz tm8+5UIpfI560wb5aaXcImeoAghziwOkA3zfeifjgl8lVwTXkYuV4GTOEeXfLl6o 3rcrbKW5+enXBx4ULgu2h0c7Sn4+SlspDZLDqWmlWehPk5ilub/Mq5JViFclcmgM /wEmC5VSNFD+6Y6dJPY+I/iUBHXrrPlNiXigRRfKquZURt+sZF9qyM9JIQZS7zKP CKXeNFTm80dhNg4pIjTxojbrieseSPtJFjCoLPI0ov/GwdCyvSzOO+8bP8H9TFYP IbVx0mTJyO7NzY8Ad4rzUGH8Sht+rnMv92EGwxw8DqvFHDKRhL3isJ113NhbasxD L1mTnnnW31nJNAgyFgKnVmDURvjd0kQ4y3SpPUC0KmWqykux0IgjAOrRgss96EoT nWCwZuDqS39inSqYHsf0vzYvhm2ewCDPb5dlOxSxv+bUxtQFbNGCaW5yBVi0kctb I2IVaYedeS/ElvI/JtI7VGCHOX5C1bevR+bYxszCG9uMpN3xH10G0cB3O13I9/JJ Xn5h4cTybERR41ihOi8tSx5L93HVrbWrPk4exZ+xnSEio5zwUPWXdlcJqZE37OoA HHtLdf4KtKKIbl5Y14LJt9H5TrrqnaDh1gLyWZXocrQodCUGnl0= =qOht -----END PGP SIGNATURE-----