-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:30:10 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: armel Version: 2.9.14+dfsg-1.3~deb12u4 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u4) bookworm-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: 98109f41c9b8774bd8bcee416ab27031c36c02a6 1820096 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb b7c93d2d8c48ce90b4378be039123c7e8a5b544e 687932 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_armel.deb e3a3261743bd9e7efe5d875ea3bb7c3917233a5f 76812 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb 037885fbf0fe088687fb480e92b9f6435510e70e 97608 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_armel.deb e2aa6223154ccdf9f4b06b8d43198ba2ef22244c 9028 libxml2_2.9.14+dfsg-1.3~deb12u4_armel-buildd.buildinfo 21c9849ec92f6722d413b236d408a2b7093d939d 573184 libxml2_2.9.14+dfsg-1.3~deb12u4_armel.deb 036b15143fa340df66c518b3d7c6dddc44be53ec 248552 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb 351681481b8ed45bead5c23945ddbbe26f19e23e 177360 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_armel.deb Checksums-Sha256: 243f032923eeb5cadad8f89ea2e5a4d8d601d5da37f0292d716ff1c1280a4d0e 1820096 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb e1e154eec6bcb34c70280cee017222c78cc0f8ccabfda31062e755a61d05c46d 687932 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_armel.deb 4c233e26cb3efdf4ad4d7ee0a7aeb3b72951c7cb955786d7a113f49523c14d92 76812 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb f11cf7fa410e2e8a5dfe388ffeb86b5d3cdc3f9d11ebab7704edfcf21d9133da 97608 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_armel.deb 50995f3260d22bb56f67539642f61cc1c627719d7d4d67863864086709dba761 9028 libxml2_2.9.14+dfsg-1.3~deb12u4_armel-buildd.buildinfo 93116a440d238d2e175c42db90e6589aa2d991ce78531df3dc53c4b758b6d102 573184 libxml2_2.9.14+dfsg-1.3~deb12u4_armel.deb 6f1c4a04b9e109e49d73777123044c4667af4e0484f177c5295cd913a90534c4 248552 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb dd0265645d4d4653b37e8ebb18e82c5f92d39398610e07a8ce5e2d80f07430da 177360 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_armel.deb Files: 9e46701b4693a97ff3b0d10b6370d1c3 1820096 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb 7bf493a17fd729d711885e828db8251e 687932 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u4_armel.deb a24604ca15ac8335aeef6c648c00834f 76812 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb 6f044e2fcca982257e72e8d4ef52043d 97608 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u4_armel.deb 4370254251b92bbd39f430428f3e8eb5 9028 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_armel-buildd.buildinfo fa58c7066b6b42d11dfe937cd8330da1 573184 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_armel.deb 4165546c0fe88e25a3f1964273a18da7 248552 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armel.deb 04072d78f8e7e51d6c16538ec6b259e2 177360 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u4_armel.deb -----BEGIN PGP SIGNATURE----- iQIyBAEBCgAdFiEEegRwmIwj8f99iF4m4CwlMGxHD8UFAmisUFwACgkQ4CwlMGxH D8Vxhw/2NjqcTAienzUR2PvZauupgNGHC4LX4hqq2Re8uPpkTVTP/tY5x/VpOXBf klpbALuzzuWLjncbMxJKLELEN8engOKSzUicYgcX6mT+t4CVfz5hixoGhxV2YV7v IqLraZKBGOUyKYGaRXAG12TPVaa+SQx4xoOCjlnJ/FaiL11yWE0bik0HBWuT3PoG aASLtMJuPXfgGkeFTTVlSTIHD0vLZn6+CCaGtK6Q6gKcSe8juz+TKl7J5VJde6kB 0mT9s5uHuWP8jRQOUkGOzQHmEo35uZ/RcQgoo0P+jsq3KLTNmyFqBvgMQEFnQAnT d6MvE8vZk6DdGn8DNlkd3ROX4luo94JoVtvfC/eIxion63fAr3bCeUtM73MnDObt 29FFp1VeQNvIdP+whYggiKjihQ+YtIAgEVp7kdk2iD1S8MgnfVWMX2I7lmBUv4QE blxkTgPcbOPOPC8VyE4fis8YyLpYp+svWZPnQutO8VyJXIQStZQuIEQ3PfzWYE4I xdsBzlFUDgOP7AF7HDUFONTLq1vfzufDOBJ9lOrCofUwl859GbhG8jt99l2JiLi6 B495boxucYvVCT9PXxvB3BQC/RamdJB2QIgxjb09OKHHDZRelg0lf7OjjGgz1MEi SdesCHbaJRf/A+Pvcyll0sRXZMWzRHaVcguc8/g/xHrR2vQyvA== =1w2p -----END PGP SIGNATURE-----