-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 25 Aug 2025 19:30:10 +0800
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: armhf
Version: 2.9.14+dfsg-1.3~deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1109122
Changes:
 libxml2 (2.9.14+dfsg-1.3~deb12u4) bookworm-security; urgency=high
 .
   * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype`
     corruption (Closes: #1109122)
Checksums-Sha1:
 bac4efee232eb87af4c2e7dfd23b21ad2c87ff72 1869140 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 39d213d255d2bedbd5ab38ab9ae7ed07a70c2abc 709196 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 478fa11d98a01d006a6246337bc4a87a52f24c1c 77276 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 9876d3c2dd496dd0ef64587d1c92a2c0a1742ae8 98028 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 3b6a258c2c6e99ca306eae8a8af50c72d57f41b5 9030 libxml2_2.9.14+dfsg-1.3~deb12u4_armhf-buildd.buildinfo
 e7a9c87090960fe09288cc76b8dd5366af65a68e 592240 libxml2_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 48a3ff1613fcaf061aaa6d06367f42f7771addc3 244772 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 8d9cc3f3dfcd21beb86b77176f8845ac30cb90a7 178712 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_armhf.deb
Checksums-Sha256:
 471d8522ab6bf3c71150c72f51322b18c886ac8ab98d7b63926c6e33603618e4 1869140 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 3802cf00baab2d7eec3a8eaec376c907e0385b6fcf85fa98edfdc4d21bc1c4e1 709196 libxml2-dev_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 07e82f0cab696e91b6f4d0dbc4a4870d90028d277e653d04cdbe63a49401d491 77276 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 e44016e22979ee67c01bc820c44d3d539557399a67c59c3f1879a1c9a29549ca 98028 libxml2-utils_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 df68cb38a85db795cf179a4cc06efe210489e5d0bf37a6c0704eb18b37d51026 9030 libxml2_2.9.14+dfsg-1.3~deb12u4_armhf-buildd.buildinfo
 98fbee10e8601e6c7614404409393da9b048f4f2477f94014caa8cf231ed7c67 592240 libxml2_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 1ff03afcf2c2da11545b039bec1129eb9173b62229f1d7939a9c96bd70ad3d20 244772 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 c77c711c2826507b65bfd9c94072fc8527e0f9d7465810cedd6a12fd513e9e12 178712 python3-libxml2_2.9.14+dfsg-1.3~deb12u4_armhf.deb
Files:
 9aa2054305a1ba3310a875ae87b10772 1869140 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 771b7e4e9b84784c1098424280c4b814 709196 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 399c3d6667ccb08f0632f02e5d29494b 77276 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 dea76c43536309cf79164ac019460092 98028 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 bb918ca23ccc66c49039f2b27c6094fc 9030 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_armhf-buildd.buildinfo
 131b3a2dd5d80dfd2d3c9bb9b074c353 592240 libs optional libxml2_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 04a138b23762c9abdeb0b2ec50885c5b 244772 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u4_armhf.deb
 35e56395a0b738b541cf1d326aa35714 178712 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u4_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=LHhc
-----END PGP SIGNATURE-----