-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:41:17 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: armhf Version: 2.9.14+dfsg-1.3~deb12u5 Distribution: bookworm Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Changes: libxml2 (2.9.14+dfsg-1.3~deb12u5) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: 036c387f64eeba1e83025003bd49034ddd506e57 1869056 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb 7e006a5809161a3e1347ea016a1ea277cb080bd1 710156 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_armhf.deb ea856d775a02fcf601cd38c8d8ff8db9ab325bb8 77280 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb af89754c5dd299cab694f36f1debfdc68e363698 98176 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_armhf.deb 24ff72f449a546ad31bab2d4aab37d2f241f7688 9041 libxml2_2.9.14+dfsg-1.3~deb12u5_armhf-buildd.buildinfo 81795c28beb8dbce5ce806b0851e716d1a35d1b7 592120 libxml2_2.9.14+dfsg-1.3~deb12u5_armhf.deb 0405b96f69a4c61d37fa6d88385813b28dd61d09 244768 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb 8c2b9a9daf5388551edb4d43a1f330db98954f0b 178724 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_armhf.deb Checksums-Sha256: 503018ac1b6a5414adfd2b28175fe8c707829eb2c18edfde4fcfb33984c4fe98 1869056 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb e0243172d7e6c1a2fc6dcfc47734540dc4264434e38d38d91ede6d453c25f43d 710156 libxml2-dev_2.9.14+dfsg-1.3~deb12u5_armhf.deb 1b871fdb7d14b87d0d42c4abe7af041d004931b17009e9e8a763eba629bf5ce3 77280 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb 1acf0b7637a06d8b0c7559b7c359d81e6531a9b604d2f718fb35b547b9e18e8d 98176 libxml2-utils_2.9.14+dfsg-1.3~deb12u5_armhf.deb e8bf5eaa9f5ce32a192f4eab36a7cf1b4eb37b7a5c79daa39857b02d6204fd8b 9041 libxml2_2.9.14+dfsg-1.3~deb12u5_armhf-buildd.buildinfo e1d629c810ecff7ca42f13e44038cf5aecb0e7beb7d9884ac21c8c0cf7c65560 592120 libxml2_2.9.14+dfsg-1.3~deb12u5_armhf.deb 46b9e28be5d6a7b74357ba9fb8e1a967c0788ae1018878370543ab944e9a45ff 244768 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb e794eff6edbda8250556bf53b4f6dbc1dec1d501924f937007ee594365bfac6c 178724 python3-libxml2_2.9.14+dfsg-1.3~deb12u5_armhf.deb Files: 5bc4a52cdb1b3dbbfdf3ed1f98d6aba1 1869056 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb d3088ddeb788a3713a4acc86e4c0eeda 710156 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u5_armhf.deb f312ee20356bbffe1ef714735db7f0f4 77280 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb e5c7192fd937fb45fa7d8cc73c32c82a 98176 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u5_armhf.deb 2222413e5700a12d7d04748b619f8282 9041 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_armhf-buildd.buildinfo 71a9a05ec73a5220bf1ba037defb7e7f 592120 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_armhf.deb dec6586af4808ff9a991a59324718f94 244768 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u5_armhf.deb 701e98d47cdae841feb3bcfdcb25e0a1 178724 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u5_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmk1uxYACgkQ8U6eOZMp j68Vag/9GALbp6WY0y7JEZ1gYp07W9JuzFiJTRdQ3QLJntYkT0DJ8MbOGY08FeOs 5t8+oxG20pWhu1mmu4YSgsP/S5VpPJ5AZpUdOP5einp+N4E56gszTRmmBqqCxGiV AzVIJ+J1+aA56kxRxryQnNwyrKBQUSXyDshRvgvks5yF9Xqe+GxIZ5OKkexsDgTQ oWZIvwTdaEBLLNbXXmB1JVveOkuIKVbAycNyZK7/vw816GQ4dwnWQm8j/PLGmpTx cRv3i5NHzbfXY6+0c6YXItR+EfR2u7DEI3Zcx6+uAIYjfdgyiYxw6RpAs0ZRr27/ NAQmLqlxkiAQWy6LToifvfm5sSrgYrEj6o9c/UM6PCzrcLp0nt4aSLT+a4/aK/hl gPwH5baZRvcaVipS1xRE379Roltv1xelVEHZ0ToqKCkbpXgYHPNpDipRXWucmD4Z LNT+CQ8Mro7o6LhmHeSVUo+zRnYrpYHdXXKX38Wp9Zu+gsyDBfJIrrkc6vpNhCwL UvHManYXX4q6Y7c9+hftGknL4SGDRu1Gt/2zRn/wOxT0oPjVxAQRimCB2CqNlLKi Iu+zzFyuIQvCPx37Y7DtjxNeRlre30a7NtM4GsRAqcVe3VLOfvICBtNLqdjuX39A BxzyqKvtsGQ2SAkhVqi0YtK/RLu72usH0nKq3yWjWu0OGl/VvwE= =ma03 -----END PGP SIGNATURE-----