-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:30:10 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: mips64el Version: 2.9.14+dfsg-1.3~deb12u4 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u4) bookworm-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: ae0146960269d23da4935ce850bdf661f2b729a3 1990184 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 89b861201ed2d6d9c3b89f599c950106a057a194 810292 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_mips64el.deb c24c0529371cd8e6e699ea6d8f4b1678e05ef87b 81160 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 17d367c4a60515a6894fb774e980c43b515310df 96836 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 445b3d5c74f7c747fe3bf8e23b90228100a59982 9036 libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el-buildd.buildinfo a8cb547cbbdee93d644fe0c610a9bcd0f90a5334 601504 libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 7749e954f00da2b37f62efd7d914a75282a89a42 260292 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb cf2f979b3c3340b7a3b4f579446c5008009f2f4e 173964 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el.deb Checksums-Sha256: 76e478eb50991c2ed9f2f5531527b0e858708b6dd16059af799544f12f6ca139 1990184 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 1fba6a276895a703382b1d1577c4e2bab96f72ac162911516fd9bfbb08c4ed24 810292 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 4eb6bfe5b45db17cd2926c448cb33c64ecfecfd0a7983d2fe71308652a225800 81160 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb e9502805e99e8cd3be8aea957ada2454d4095b13f9ba883af502a8b9e895ef77 96836 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 99f0ceb686d0c99cf8111311c26bb4ccc9cf366e63e1560b5fcfa3571b791f05 9036 libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el-buildd.buildinfo 92803c91f96b5120ae4c74b3b59644b3072e4dee1a9ff68152841d1f39cb5007 601504 libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el.deb f4377148cde22b2f9c86d56f2c18b6e0c7b6cab66f5ee531d90fedaab5d0a434 260292 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb a9d170720bc6a05726f4fe6e40c19af8b72d169059d8f1dd35fe00f92b58ffcb 173964 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el.deb Files: 54b54949c8e6b123d0f45d9874270f6c 1990184 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 5fe37b7fbd38a682be4d516b48211044 810292 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 2b48f17e35b1454b1349eefc9d325d2c 81160 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb d46196248733d649b60c5bf16538a7af 96836 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 5096affb1fb1a6547a9536a6be5a3f80 9036 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el-buildd.buildinfo 33a419a8a0f5acb5038add254b505fa7 601504 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 202e4153455e33231a29a70293f2ccba 260292 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_mips64el.deb 891a46018c25f31f34b0bcff7f564380 173964 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u4_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmisUN8ACgkQmf85J+x5 /aotaQ//QV4iwekSrjepS54fTbLolg0ycqVYg7dN4vZ6nIih6IcM6jT7wCsDccOf 0onh2r+8TRuSq+sy5bVoghUZDL6oadEWIFBoGUfh8vFjldRpo0e1bjRv4sG6eSm2 tLgjuMI/Yh9ixhfKhZwWYKUu18g0y7qnTmyIirRol7lFa2Rn5dkiF3+9q0RxffAX y/B9xBau1+8BROIUvT5A/WU8biaV8VfPDyqDlfmrYUgbVc1h4a5S1hO1ASI25rKO dY6HN5+msqrWR3q2L9lYtAEaFxlCQ97uiW5+Cxr6001OJ/7Na/VFiLO0/tl+Hl6v pUgNZpW76vAbq6LdUC+gjLE9opyPBS7K5UQClqIlDJKd4neM5/LszIskKX2V8IAH QsC1r1EYbFSpelZDqsAiLPfCi9P1/hRGC7kiCtyEypQiS8HKL7eiGd8c66o5rYpR q4YrFh/3SYd5AWb3m8tjneRazdeVDt3FcYrGd6g/wUxYGkLdJCCcN5URUaSew8WV fOjpmhimtR31uwH6vCejwFtYEAVdnMs3khgRE5gQ27LU7S+GtP9B6obOZvtOs653 6PmqxA3hnlp9yFKB3RR9bDhCEzVGqZMP9vOi6jSrc4cmIJNezK47IIW7olN7vgNM epZV65rVBlt9R2fNDbxgdbqhwDK9PmWhIjHAs47kuM+tzrNz5KA= =LdUQ -----END PGP SIGNATURE-----