-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Jul 2025 01:15:48 +0200 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: s390x Version: 2.9.14+dfsg-1.3~deb12u3 Distribution: bookworm Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Guilhem Moulin Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1107720 1107752 1107755 1107938 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u3) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-6021: Integer overflow issue in xmlBuildQName. (Closes: #1107720). * Fix CVE-2025-6170: Potential buffer overflows in the interactive shell (Closes: #1107938). * Fix CVE-2025-49794: Use-after-free issue in xmlSchematronReportOutput (Closes: #1107755). * Fix CVE-2025-49796: Type confusion issue in xmlSchematronReportOutput (Closes: #1107752). Checksums-Sha1: bf26ce5a3efe06aaa3208d287574203d4542bc56 1871296 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb 4b253034f0936325505fdb9c55a33dd5332327a8 710424 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_s390x.deb e704dc4dc68b3d8e9c12606019d17b15e0d4aad4 76796 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb 694d7805969a7d9928186f74a164e16ff0d605b9 96884 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_s390x.deb 2000dc7b1fd9d0d5d56b0319fecc26ac134c9693 9058 libxml2_2.9.14+dfsg-1.3~deb12u3_s390x-buildd.buildinfo ee6d13117797b2cc95a45b6220e156014b6b28dc 604976 libxml2_2.9.14+dfsg-1.3~deb12u3_s390x.deb be3f44f16d1431fe4349517db2983b5d71c4b4bb 243656 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb 03b20d141e39c82089bbb8f499b1eb499c876e30 186576 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_s390x.deb Checksums-Sha256: ac0252290d8cac74a712976d045ebe2837c7e070765cbc2e9ec212810c58d1de 1871296 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb 6d7e1f1521b376df6cbdd6711df15439fbb5fa41f659259afaf9b91b0bf28d03 710424 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_s390x.deb b4b87af867caee60843d464f6328af83c0fd055d03640490d7d320221755e1b1 76796 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb ce8f62f4a86e2041813411ae5ae04baeb1664da36bcbd113c252b0b70afdc076 96884 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_s390x.deb f1be5a90ff5822bad9c70a7586faba6242c622442f082b7ae013da1dbb00589e 9058 libxml2_2.9.14+dfsg-1.3~deb12u3_s390x-buildd.buildinfo 12cb3b7fe35279ba9526da2778253ab0495da2b4010406e4d8aaf22db46235e6 604976 libxml2_2.9.14+dfsg-1.3~deb12u3_s390x.deb 1d4857343bedc1cc43c7382885fdcef2ba31d7f2766acd710abbd381faf33a30 243656 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb 92fefe28fd40175c84db77b734a38bf6e6f70bfc283d19275143f889a10d87ec 186576 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_s390x.deb Files: 90c05d6d9bed0361b585650e38e40803 1871296 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb c13e623819d65f24d195c0534be83be0 710424 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u3_s390x.deb e127ffb0f937d41c01daf526c978603e 76796 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb 6c9a6dd5139a307d18404bcad5c0ad8a 96884 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u3_s390x.deb 815cc0eac90db9e87f02ba080515e70e 9058 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_s390x-buildd.buildinfo 60dbb52bf2f79c4fc2657e3ff822270f 604976 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_s390x.deb 08c488e10d2417665000ea38d92c5286 243656 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_s390x.deb e9c2e33dbb8913bf5818d92225c3de5f 186576 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u3_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmiH8KYACgkQAKOyQzsW Vau+8g/+LJoj6k2Xz+kQ2BWfd7UWg+9I4Qm+dE9vj5Ko5lN3XA6MuaPMLBsLnwXi Uv/BjrlXbgnutRwDv2GVM1upBaOJQi0/LfChx4o3G4rPknHYa2+7ev/OgFY8VLrb uxlFN/l8bp+rTq5YyCn2otiLcHyQbPZ52HyCbiqKbJhBLudchOkWBs5vbnd3RhHA GANqcW6Sa6j3rNHo9fYifC828jCCpaB9Xeic4+9BaFjR47XZa8wCEk/PYIfh0u9M Kzu2Ruqu0kMvOou6nZoIVr/yNxX3ymWOnD7nN/nTJNVNBDjsKF6p9AHyFfk2CgoJ GxB9+kNL2Rasac8F9A18p2AEmlZtMfO+GXWpbs+grtDHhk9G6HtrYOJxiYk9YfmJ ZCB3WB5LF6LtkEvfiPiYzVIE6q/XZwhHKPokkLuTaFQkjFmF4NvUMaYVzrOFfVwF 7Y4ggWFclxLmMavm9aKMv1ub5/caJ+Scz6dhuTNY0en0Nr1HJQDgzf2xbh9/RA+2 AjxbbHp1EyXM04oQ2luog+lYRJHLlKKodnGt+a6zZtmwcPS61+I9J4TSpFailzPP HOq2VkKYIVpDq0BJvKK2pMvFWqqCfGH9/3eXxNOj1AVaXoRAlKm7BuxCfWpHm+3t zB33r01WIiNOgI04fNmpfe0G/QrVcuS5ijMGig2ZNz23+c+zCE4= =7GnJ -----END PGP SIGNATURE-----