-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Jul 2025 01:15:48 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: arm64
Version: 2.9.14+dfsg-1.3~deb12u3
Distribution: bookworm
Urgency: high
Maintainer: arm Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1107720 1107752 1107755 1107938
Changes:
 libxml2 (2.9.14+dfsg-1.3~deb12u3) bookworm; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-6021: Integer overflow issue in xmlBuildQName. (Closes:
     #1107720).
   * Fix CVE-2025-6170: Potential buffer overflows in the interactive shell
     (Closes: #1107938).
   * Fix CVE-2025-49794: Use-after-free issue in xmlSchematronReportOutput
     (Closes: #1107755).
   * Fix CVE-2025-49796: Type confusion issue in xmlSchematronReportOutput
     (Closes: #1107752).
Checksums-Sha1:
 19308facc474aec28634a5799fc3233216c6e7d9 1868628 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 838198461d61f630bd3acd521c6fa0e6699ee426 740200 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 0a51dc18c018c6d420b54f9113eb90e674f3a8f6 80188 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 02cb7ee6c9fdbf0f194327589e47d0816bc55592 97672 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 6dd3da1477d76238c1da3cdacb718a8f61701cc6 9186 libxml2_2.9.14+dfsg-1.3~deb12u3_arm64-buildd.buildinfo
 47b365265535716ce456b3dd00c4b5a5b51d0874 619860 libxml2_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 6d640461580bd2eb777ccaa64c43fd051a2e1961 241340 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 70a9eb679b2bda1d3b54972720edb7542712d423 184712 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_arm64.deb
Checksums-Sha256:
 5b38c85818a31acc1862cb65d5e7a7432b220fee6c22802bf2a55841cc60c08d 1868628 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 ea735a82599d4507d0ec2cd4c9aec3f324b352ffe1f21cc6b41adf0b978de81c 740200 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 4239d6deba5607f14acff2d263a949e84a0dfaa10774a63682ba08a3826f152a 80188 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 8f8dbe3ffd6cc061523f0e4be825bbf7ad9dde4a1c320561e776ec7c12bab470 97672 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 668b5bf722738c01b2b7fac152c6cffbb358bde4f09ff28f6174787c11e226bf 9186 libxml2_2.9.14+dfsg-1.3~deb12u3_arm64-buildd.buildinfo
 641cc4f8b1422433393fc95a0662e52a1effbaec972cb502169b18148fa4647f 619860 libxml2_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 c37f15d85e179a2342461008b5ed1868b001ac70315e5fd0b06450d31e2f2d67 241340 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 9594ad589a11aaef1e496b75bdfc3d995958f3d24e9b15e4feb3f31cd0c96372 184712 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_arm64.deb
Files:
 a5a48ff983cf2bff63f0990a22b5d4ec 1868628 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 ac782833e5e65b91f6fc5957f6abc429 740200 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 e7102ca0f4fb54284837d67b8d6b39a0 80188 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 92fa1974d64667f5b2001d24c117fd78 97672 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 7c353520aba3fc16c0fad45825de2637 9186 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_arm64-buildd.buildinfo
 5a3422bbb4980f6f45d59b7f53f2c428 619860 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 71f149946ef500978eef2c9cdb9013c8 241340 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_arm64.deb
 3f956033f23c93fbc0e8e44b59e6ef55 184712 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u3_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=bJTw
-----END PGP SIGNATURE-----