-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Jul 2025 01:15:48 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: ppc64el Version: 2.9.14+dfsg-1.3~deb12u3 Distribution: bookworm Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1107720 1107752 1107755 1107938 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u3) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-6021: Integer overflow issue in xmlBuildQName. (Closes: #1107720). * Fix CVE-2025-6170: Potential buffer overflows in the interactive shell (Closes: #1107938). * Fix CVE-2025-49794: Use-after-free issue in xmlSchematronReportOutput (Closes: #1107755). * Fix CVE-2025-49796: Type confusion issue in xmlSchematronReportOutput (Closes: #1107752). Checksums-Sha1: 1a8b4c2edfb1f47584a57cd01f6e681ea529fbb7 1959504 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb c434d336a5c458b998ff9bda947e4f687b9d163e 855380 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 18d822835320ecb6e4717c6d63a4f19b6e2e3ebf 80452 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb def36ecd6f04c826f80c269263c008c81f44a5a9 100768 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 47f230bb4b4b71ee329b58b6bc1aaa633f4b6c90 9216 libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el-buildd.buildinfo fd3d85b508ef7f8fd4913e78f50d0720ad841d80 724016 libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb ede27484f6478ac6e37a92d2d0d552b8d651cc22 253024 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb f9376864c61081856af030a9e86a4c8748d5768a 188908 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb Checksums-Sha256: a7e627d08f10b83201ff950f36c7a477c2b943e7fe334029739d47e6a7705232 1959504 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 8f574e59d65b79f8a6133a2dd53c7352df6d6c52180c5c9fe65484028f41db91 855380 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 62c76b8418ac2a4e17567d0912f2a46b60d22f319e97744f540b220cd175cd77 80452 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 9517baf076cd1c7f49630e1e359a290241c1e5b639f5da3b33118121f05be539 100768 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 2d2c79dba9b06dbfcb6c4ed350d5303b8d352772a1764a8e216dbb527916d970 9216 libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el-buildd.buildinfo 9a2a91408bf7aabc3acf39b289afa158d47cd691a635d594cc8cc5394d5f42ae 724016 libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 02b4e4e2c182448a9a459c4fe35c53db4db366aabaebf9e40407ecbf7ef96986 253024 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 6abdfd2aa41368c46f6bc3237f10843c6e35a40818904b3fd1170eebcb7e90ba 188908 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb Files: 1f612fdb8ec50d6206d1a57f8aaf883d 1959504 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 74e976e100cd1ec0da37006c1ee9d318 855380 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb f84e6367aa68644e68d518b77a19b8b8 80452 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb b43f86ddabf99082a64c045b272cb5fa 100768 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 18624393e2d11b54fd5584ebd2c14c85 9216 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el-buildd.buildinfo 0fd3802ac31c41928703820e4620d8dd 724016 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 8123f557da7b9712f608bc9fb7aeeb27 253024 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb 229417951e8dde0d6d0fcac1751de029 188908 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u3_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZAv/jpGRqS40qyb11oy1TpxF0ZAFAmiH7xEACgkQ1oy1TpxF 0ZAqDw/+MRpWUx9KS7O+wlVvMw+krDY4QebdUIOPm7L9+GpBScJDo7hkKqueNH0O sXE16ubFUWD4RP91iggEyfyrj2shC0er86hBCnCiRP5kTxSWqLdB83If81/SDlck e7slnWH3KHx1urp3q1x/toxotLvKtl7Gfat47Iyo2kfadIntYdYrc7M54RGKE3ir eB3NmJRrbnO61RCh105K89daHl9b3By2ikRE1dFOoYgBZs0xI9/Wj43Rr/anrPJ8 ZZRXmrpBqtR/3iOTHL5viVXLgivksck5GJcudFQqzX79zct0r4uDbYlbX1bsJkjc fir1K4v5M2POMMCJ0bm09GZ0KlTUe9D8jboj6SXSEMyd6mTb+5dihnkFZFWAZMgp VGdxpMrYw2GEVS8Dkln488x8kNMLjYQBxNEb+WXDM/R5XAG1GFxfiFdYPIi2e+Cv 4kM6rIXabxXIevcZu0DfsPbpmuNtqR/fQHA1GtkjpT1ih05QCvCTPkMfNOmLox6I ZMHqr8BD8/02NTt9FWoOL9ERCHlhHF7CJGEGIxQUnVRqiEVai0Jm9oEAmPfLRZ08 bl2g+3pdYiyKYe7tA/eQBXGLARLVSEHShvQzbn75hmmnVf5QWNeLLSF3hKSsrI5K y8KEozQKT6gYP7LcwBGp7Sx/D4bBPDTK2rPbkyL9aGnypkDX60k= =+2Ex -----END PGP SIGNATURE-----