-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:30:10 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: ppc64el Version: 2.9.14+dfsg-1.3~deb12u4 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u4) bookworm-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: f73793774606e39e493cf4d05f4ae231d0ba6c28 1959064 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 4ada85686789a69276bab63bec4cb92013e167bf 855840 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 94add75b4ccee6b92e25bf12f36d4cde7ac14f3c 80416 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb d3af4467f2a8b0d0ec18dd7b54964f2dbd954bb9 100820 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 5683970b42e3c59f43eb652c0891feb913d490b0 9232 libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el-buildd.buildinfo 69d33c836f8066db2c65b27bb4a474c72f936fb1 724020 libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 00176a8ec5a6b4405ea96cd791f4f6f4d6eb0107 252984 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 0decd38b131c86942fbebb3868086b890869217b 188620 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb Checksums-Sha256: 0de983ab9b77b7d7a265410b907a496e8deb2a80bb024c0882482e58a2bc9637 1959064 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb f05414cd63956fcc5db37e284e7f8cafb18d71632a844d387710ea3ab79097d7 855840 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb a3aa13102196f7a5666cac85db7869ecb4c05793e009f4414ad2867208bac750 80416 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 50cf607326e8877ab81f378a6a0176fbf1fa15d0d417eede1c49dff32e701894 100820 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb ed4956e55c257a5288763fa6d094fab1499116de7ed8d8111e2b1aeffdda2c47 9232 libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el-buildd.buildinfo 554b458991f09e1a37ba3021927777626e997ae03ee92187ca38db12f1970151 724020 libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 57786ae3c40787c45ac694b4b432c73b80df6deee8098ecc65339a787a8d122d 252984 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 4def4e5a429e46222a71b4e8b82f7de491ab1d60e4ec882dfff240548b25692f 188620 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb Files: 29aa741617ee625a80634b14ee766b1f 1959064 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb d4a389350e507d987a37ed72669d9a9c 855840 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 56a34a5452087bb3b7294a34ceb59ac6 80416 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 99f3edc807fa59c7b22e65b2d635126a 100820 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 302aa575831809f7fc6049e8dd7838fa 9232 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el-buildd.buildinfo 8ef4006f7086cf00f70ee9d00aff9f89 724020 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb e0559d8600dd7f672db2d4ddaee7ab3f 252984 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb 4ba4f1a8442ccfb5c83438b95d087984 188620 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u4_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYo4fOZBRi9qmvTxH1PowSTJ8+YQFAmisT+EACgkQ1PowSTJ8 +YR3Wg/9HwLLWfFSu2Cd5Ja6/qqrTtqvZ3mcK0RAJYkPmCxJDAEA185hcycGO4IZ yQwSr+Dh6faHFssusfqDQHwCsZ5X6DCTFJi2Qv55I2fPxej2ghfU6vgNjz0+fMIJ F+NqagOuUwr+QqCoIE6gqCsFJ6ZErHLStzeps6e2X0aM21sMoQ/JB0mpBL7m5kz0 YUH3tLBFnsLuS53m5LPbV6rDl4YBNaOf064wdMMD0Jarj5W1Yw5sod98hly9iRsk x8okEsJm//jI5sJSu6vQLhw8us2TFglRLAxIKiufhD7PreVY5vtMkyshqlf5Vn8V XEq/cbcmPSI617WVyWSKK8c9bxi9s2IPHuOWlbCfr035gOyd4HFNu/E0g/oN5AIM AEsityANdEHtdXSIqw50r7piH0W6ucPzwa1mUdOkyjQ4yzyZqOTbRFHxD/Hd6lcm 3QL2+UbXAKZWjRQY1O+MtSoNImwLpGNV5hNPA2zE8bEAJnTMGaGNGl4ysCbMlBMa OXjFOwwCphGIP4qpggnGTvAyKdKJK4v+eFqSyKp7kitpnNuAP2cXeqjsWhrw/6ln 0iINXkEt8Ls0fjggwT/sIf/4aWAKAX+uWCKjbnNdFjfspqot35PB7n97I+vlR8Hf /wdSLBbQXLqL4ZZmRjrRjd/tkPnJDs/d3LwygolO3Z8g54SBMz8= =R2rj -----END PGP SIGNATURE-----