-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:30:10 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: i386 Version: 2.9.14+dfsg-1.3~deb12u4 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u4) bookworm-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: 34b16638998b78e65ec84f01a849dbb9b716324f 1710744 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb d3c1c4a26806d496cb8f52724d5fcfc13579f8de 844744 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_i386.deb 048d8f829235872bfb11c1027b354c95e357c725 71000 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb bdae7a2a324978e7b7fb493e4c22b24f3e9bce14 99644 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_i386.deb 6a7af3791940b47be082a64550f6a9e57aa02b35 9096 libxml2_2.9.14+dfsg-1.3~deb12u4_i386-buildd.buildinfo 19eb7120b0cc79896f26909d3955b66f58962947 720852 libxml2_2.9.14+dfsg-1.3~deb12u4_i386.deb aaf706d2828cfe46d80a6ecd91ee500cc2c11da3 181628 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb 70380399097be017b629caec5fa016172fd0be20 188864 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_i386.deb Checksums-Sha256: 88d1c9a77a4e6824c1d8e68bd9e3f5c2ff220afa25cb6d0089e3cdd195fc33f5 1710744 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb dd7151d155ce6243cfa02c4fd7485f67df496c0cb0fb2fb4f332c9a0e921914e 844744 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_i386.deb ad7f620737feb33c2bc181a6c703b2dcaed926fb7e3374e427d9cd5f3f9604c2 71000 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb 27414b1fe7386555d798992cc58437fcc5d4052c2cc99d0e55536b89af42de33 99644 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_i386.deb 4ce0b09a6443f6422bf9a7eb19bea3b01077241bec8098d17f4a33bd54d23032 9096 libxml2_2.9.14+dfsg-1.3~deb12u4_i386-buildd.buildinfo 59779f6b7e2aaa384f7aa661c196f5f358f46e7196130f408b1ebf7b674a3112 720852 libxml2_2.9.14+dfsg-1.3~deb12u4_i386.deb d693a2d7ce2c0994212b4ca74cb657f344fa11bdde0a192db0d5845bdf018baf 181628 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb f8d3768b92278bb50e890e4ac5219ca954b5164611200c933524dea8c9ddfe63 188864 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_i386.deb Files: facc59d43306ae4142fd4ac97ef78db8 1710744 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb fdef1e775274d8b7892e128cf250a66e 844744 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u4_i386.deb afcabb8877d02b229b91902531083e42 71000 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb a86f0f197fd954b68c2a4322e607f524 99644 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u4_i386.deb 2e324ddcd2dd0955d5e5d85c3d4c9d95 9096 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_i386-buildd.buildinfo aeb2a5eebf606fb21e6a9003d39eb75d 720852 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_i386.deb 4f49951b4fcb0d3b5459ae37856c8bb0 181628 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_i386.deb 9be42fc8e1cf03922ab9a3efcc0ba838 188864 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u4_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEErwLLVsiCiGZggzpHJuP6X4A0XeIFAmisT/cACgkQJuP6X4A0 XeJtQA//W5fmFqvkT8iz/iIAxEPOBF8dcGVCbncn8TqtS6yQ3rl3WIoHfGlR97w/ SJ1KYwexHKrw4DaMfIc2+XdvYCUa7MKutIuIfHZCTohLswtQRf/TuLSQBkcHYbeY CbHVF1BulgUp7CLbjpB2Cg1SOLEQVgqEaETXLE5gJljN6cDA3fBHkFklgBkkDEvP j2+3t1Xnk4x/DPF9Y67o0QcYU4ckLec8t1JTqvcfYu0NIFp+10xJInBwoWmG0tQ2 ZUXolEnOOxnB5AnzSQN93TifKFuSMXm3mdsMy7V+j8A4RPpA6Gcw8jD/2jtUZZX/ lsugP9AhaKU5iXKDe9zNQvnwwlY6JRYpaSDGOUBJQnnigAikPe1137SDvHGvboPS IWfjxd6okSI/en5+Vzbd6dY/TDRoov27fcUExsXnzE9AIz20q0N8zP7XDEtj+4U0 xQpH7KtKZdepv+JdKYlVapkHqwyPwd9vlXufBy/rsJpLMxOWnamwsQdFBy+JgbiH Dz3Qgf5a3FYjHrz4YiKIhMO/ZY1s/QkEGR6rsubh59URATX2r1cyo2uXCwqJdSgf wm9/3SjPjsXl/jOb1bA2lHKqDSemm94eWtpVdBdLOS0ZHcHuPXIfiYdHN0GlNyaG 5Vx/OzFhXk39qmJlnUeQMslIUPZMnGaku37RFn1NADb40HNZk2Q= =2KeB -----END PGP SIGNATURE-----