-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 17 Jul 2025 17:09:57 +0200
Source: libxml2
Architecture: source
Version: 2.12.7+dfsg+really2.9.14-2
Distribution: unstable
Urgency: medium
Maintainer: Debian XML/SGML Group <debian-xml-sgml-p...@lists.alioth.debian.org>
Changed-By: Aron Xu <a...@debian.org>
Closes: 1107720 1107755
Changes:
libxml2 (2.12.7+dfsg+really2.9.14-2) unstable; urgency=medium
.
* Security fixes:
- CVE-2025-6021: integer overflow in xmlBuildQName()
(Closes: #1107720)
- CVE-2025-{49794,49796}: use after free and type confusion in
xmlSchematronReportOutput() (Closes: #1107755)
Checksums-Sha1:
8f462753bfd03904871b09ca211c715bfcced930 2681
libxml2_2.12.7+dfsg+really2.9.14-2.dsc
1398a05419924cffdea3f2a1841ee7f68f16c00e 42264
libxml2_2.12.7+dfsg+really2.9.14-2.debian.tar.xz
e997f26db01de4857bf5b74219c44ae77c1aa5eb 5666
libxml2_2.12.7+dfsg+really2.9.14-2_source.buildinfo
Checksums-Sha256:
89ace991e5ff090efb13f16fdf80635dc50c2de7a8996ecae890372fcf9616a2 2681
libxml2_2.12.7+dfsg+really2.9.14-2.dsc
616a554f760d44e3f5a4947bc096d22f3ed8b66df17ff7e9affa81abe1d9d1b6 42264
libxml2_2.12.7+dfsg+really2.9.14-2.debian.tar.xz
4fb8285629d5239c1df68e1a752222ec4147635168ffc91fb7533f3ef8f34a09 5666
libxml2_2.12.7+dfsg+really2.9.14-2_source.buildinfo
Files:
a0aea9405acd079cd67796c3fadc564b 2681 libs optional
libxml2_2.12.7+dfsg+really2.9.14-2.dsc
04cba6991f6354667a8382571f5a53a6 42264 libs optional
libxml2_2.12.7+dfsg+really2.9.14-2.debian.tar.xz
e8380eacf3bcd5a621d25f32f180b45a 5666 libs optional
libxml2_2.12.7+dfsg+really2.9.14-2_source.buildinfo-----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEBLHAyuu1xqoC2aJ5NP8o68vMTMgFAmh6MLkACgkQNP8o68vM TMjxMQf8CkvSnZylT4T2YHl/JyUao9ei0IstJ3GA6S1aqy7VQ6/Y6s13DheZ1SAy omMEFeipZTCEMDIVHYD3TYSVk1Ts9Qd9IbzrCMtYeL0vIVxhTAqneenSxQCjFROa mJ6NYkGZIZ+rY5ZmAXw5rFA9uRNov3HUv2FOIHqtiXheYYzdAhIR7naeVv3cKrmZ NfcfIOw6bJrfZFgA7bqhR9YxbAwRhG11j6txxj0lBcIO1/fl2U4HteAF8+LDzunK 4sfcJ2GNhKsneyzA+y4p6/G9f/9hq9aMY11J2o5eMf4BDEyAqaJfrgrf3PMzTpWe 0Y3YcLQklXYsCsbxfQixYb/cAyX6cQ== =hsdJ -----END PGP SIGNATURE-----
pgpHvoDqH_b2T.pgp
Description: PGP signature
