-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:55:59 +0200 Source: libxml2 Architecture: source Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u2 Distribution: trixie Urgency: high Maintainer: Debian XML/SGML Group Changed-By: Guilhem Moulin Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u2) trixie; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: 66c147badb05f69f0333f4928df462d5bb15c934 3066 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2.dsc 8cbf5c48e66304b3b90a03d56a2d69f721d73e52 49160 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2.debian.tar.xz c828b57f84f22edcbb336f9b1651ab26cf2a5daf 9891 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.buildinfo Checksums-Sha256: 838f9f532c1ce420a7df70dd9d6eaffe676c27b2c1e60229ae000443b6ca97fc 3066 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2.dsc 982dd76823af12e0c7985cd7dfe9ddad2143f868b580b0cbe7f4906a8e59e506 49160 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2.debian.tar.xz b9f254687ebdc191ed49b3a4830babd8a9114988acf396bd964d4c7f4d9cab6c 9891 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.buildinfo Files: a55a69bcb7f4b6d0871ebb350f6abaf6 3066 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2.dsc 0979ea8f281c3a808359e0143c1fb6b3 49160 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2.debian.tar.xz 0c6f667e3fc095c5356c66e757bb9f8c 9891 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u2_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmjqXPIACgkQ05pJnDwh pVIwxg/9G2v+nJ4Axa/ayBv1whpiPh9sl1f+7idG08JhItYmnvNNPISEw6FjgwRP XSjRecefHEljjm+s1rKecNNzQZ+Gw5TQhURfVftboTHRVP4RNnHDLDTxKLm1Wraz d3knOGFbqgKU+r1RpSd6vsA0iaup2vv1Hi97m0IF0QWIg5Ps4E4nbN8viVx9Crko E3T4iFspZVa7+pegzOvjAuO7hJtWSkk9A/m1/vUGAhEZKtvRTamuDM2Wfh+3KvIX 7p91LUCP9/KuMZ4+LSAP+ipgAhnBwibF9+m8PEXfCAY5BJ1ohtJyaQhLUzSxn66X xDdcL1KpR7l/V0K23SvIxayoFY5ELnuudKR3N9vF2GnBQ5xg2/LtRE4zSfd30BF6 y0oj5DtDAhLJgx7+4GK//IIwLvY6CRlQjrNTDfQ8vSWgtWT9itnvLre1gyRXDWay P6h1eKoBvIpuRdAc49D+wZz1LO89QymyHCGBlER61anHrSAMMX+hCWuglmMIsHOp PsaY9HlW6Sjd1h8n/hzI7fQJzYHi8scQQP8LRCyxzLhXAHO/Wo/MHoR9vSRmmW3/ Y8Y47CWjFOz614KZJsSQL48v33DpaHcoZ82Fs1fB1IMom9UcC+3EiTMmhRXIAnhH xm8WjqzncmxhUZ6wEcKnQ1bK0nrmnDU7PyJaUz+ugD2tdmzbL+0= =lUSy -----END PGP SIGNATURE-----