-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:30:10 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: s390x Version: 2.9.14+dfsg-1.3~deb12u4 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u4) bookworm-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: 0e842bd0def96cc43eb39fd4cbe7b26356f1ef7f 1870724 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb 7d92131f954d9add6301c026fdcfb26a6f4ce6f9 710884 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_s390x.deb 3f833ce4edb13c3fd9f6637235d6112b965ef9c7 76784 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb ffc2a9d4f2f6be860d51cb708f717764f05c3036 96976 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_s390x.deb 8ded4d367e2fcd40201f193b8c98fb7746a6482e 9058 libxml2_2.9.14+dfsg-1.3~deb12u4_s390x-buildd.buildinfo 43f3666b2e739b972b31af557b0157565316db02 605332 libxml2_2.9.14+dfsg-1.3~deb12u4_s390x.deb dd22c55d1ef012dd896506e16b6c761fb6e7ce96 243616 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb f3695d426fd8e42a7cfd9ad5e3cbd894acd9c616 187916 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_s390x.deb Checksums-Sha256: 0c87303a5cf798f8f39b8946e03c77524251d01256fa7dfe92c257ba52d7bddc 1870724 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb 89ae20863704397512ba45fc14525216ce3ed332a960f9593662cb4ffcf602a5 710884 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_s390x.deb fd8bf01ffe8f570974551e4a8b12c04c4ae914c75550440e251f28d385081ce8 76784 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb eb1af3b0acc45e99127cff01e21d43204c6e61c63cd4782b3887abbd9f7c935a 96976 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_s390x.deb a170dfe5787bc3bfb3c031c7f9c3f7ea9e541638db207392ee907b8b2880abb8 9058 libxml2_2.9.14+dfsg-1.3~deb12u4_s390x-buildd.buildinfo ab52dbe6d823a25d5b6b4268e041492dba36ac63bbc2e438939c4b08a45b854f 605332 libxml2_2.9.14+dfsg-1.3~deb12u4_s390x.deb 31cdff89d1bfb0ce4185f4271272d1c2ecefaa909f84d6486332ffcbadba83b4 243616 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb 2aafa2be0742661815a7f54644c1e922bd952bb031204a69efcf1eab2d355c92 187916 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_s390x.deb Files: 6045ef159fd598407d836df73ec7910d 1870724 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb eab96ad467a36a38d35cdf39cb31a53f 710884 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u4_s390x.deb 46bf84cea476a3e5b00c2282b0cf1fe1 76784 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb d6d09cf9c9fc5cdfbb8b82625330abc5 96976 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u4_s390x.deb a58e1184e1d2f6bdca2c7978dcac6970 9058 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_s390x-buildd.buildinfo 81542bc22e5da29461fd27b71394922c 605332 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_s390x.deb c36c85bf7d1d1b1a97ffc233def325e5 243616 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_s390x.deb bca35f9d3ce2ac6f05f473cbba432683 187916 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmisrkwACgkQAKOyQzsW VasQKA//bKSopw7p/zWz5XNvWrHhDrING+kGVsNCE/nkb97waN8NQ1QMfF8IAcow ira+0+l+zH3DDzoVsMcq7yBXW695DdTvH4x9BVKkJzNCyRiaFgdt/zvuhPysNV5D pMF27lcw9Ar+oCbjgDTnqj+IVfPqN48ZdhRRbu/nYJ6nmH0G6IVJ66qW3KI8UVVu OUkndEw6/bfEHUiRmFtGeGJpNCwp3XE9tDEs80ZhY7mWClRRSTeb/bU0s1axurzg hVH0AWEv7cpp6/ivf+TSjr7bAx1KPMmw9w0s1cbKKGADugNbBbUPN5cc9ROlK7AW IG0/va1LPQ2C61OebafiHYH6lAIFVr31SuvQDalUJ8pt2hj4KmJq7/BU6DwCzADa 7oqvMenDl0ilk6R6d14TgP8+iUiw9fqY2ykSDnbtjtLWr4/t08VgYVDd1oLnmTlO KKWtJIHitHdcFPPPzLcgZVIgQqXo5zyIbd8orBazL2B5CZ1gGX7c/XCjkp11Ge/D fUaJV0xIhT09eD4zIpie5Q5xSzaCXAhBOk4G+99Sy5gQrUSmEbPFtAR+PajuAa8Z ETBfygsCStAc2cghCNWcVB0mkgqLgjcpImLXdo7s3AS48SX9He2oqp45b0arlADh D/+iNI6PKHVA9G4XOYWb6Dt1jJM16tWOsEOGJwd5+KG135VtTO8= =WXTR -----END PGP SIGNATURE-----