-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:38:04 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: armel Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u1) trixie-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: 76826f1e7887e849d126688c64654d5889e9b337 1861384 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 5fbc02dd48404cda3e4d62fc95ba5461130d6ee8 704468 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 4693a1972657623907a5709e12be3444e7f38971 77080 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb af0055d22b48a0cbcadc6aaef4ba06a3fd6dffe7 98920 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 85fbff9bc43c6df61d6b6d9346e12db8d796f315 9007 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel-buildd.buildinfo d67d0954507d3938c9318d2413a28cd99bd276c1 588308 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 1d7f0f21b13d5d2b3b3ab07ff60ec3808b1f745d 255132 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 725d7fbcd2d152f23938a596748aabc949e216da 179240 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb Checksums-Sha256: e179db3406f8b40d6493bacbac76db1eed7c7fe70710e671b9ac660125331e87 1861384 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 42d0349ea657aa873fc57bebb56a1f40fcb3df120e927e6e550d2b04e3fc67eb 704468 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 2a35285b6ae9581a57ec216dc91e8acba6e926843816867ea2e1fb0dead401c1 77080 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb dd4fd34b673d0d1335039ec5582a10334d25f208c51a957ce1487dd67e67a88d 98920 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb 861a79de329f4b873ea3b0d6d28d1d18e509f7d1a32b6c18385ff25a8ea07946 9007 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel-buildd.buildinfo 98c561dbe88c29ae219219ae6e5d0c3fac1233e454bd644e82265a810a94b44e 588308 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb c1d99589bd2b57476b0b4dfab5ad6d3f5554f274f12db2016f90a2b3c808a7f8 255132 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb a5b33ace084591e853e2e059e141f4088a2ff1238ca96d817a9f40709572482b 179240 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb Files: 4d45c21738f35e1fe5c63b8bfe9b9f90 1861384 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb f1632a6a79871d430bca1d8df917da26 704468 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb f39b7d473fc2fc302df2ccd92285b3fc 77080 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb fde26abb73b9609155c03b654be3371c 98920 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb c211b35495169b072888ca760fd413af 9007 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel-buildd.buildinfo 09cfc05e6ea7e1c596e232d954bb3904 588308 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb a6bb180994cd5a0ed39892177a4f169a 255132 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb da7de59636c9053472b67564a64a8494 179240 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegRwmIwj8f99iF4m4CwlMGxHD8UFAmisVSMACgkQ4CwlMGxH D8VaZw//R1HDANbFP6VOhDwI4+hEiUldSSZx0ToTQ9+PowJ6/28vBbZuX9Teyuce xzJGsRKdQarePPlsr1kzul+3B8yHSb4UmdmfxBl2lOlGJww1taKT4AJfl42uDDjk SkRx7L4W37W6KxIBqBeV3YwJmUl3CE3vDhiLMC6TuK+ZnprXR7yem/2oejneecmt iKsDM5Zo/9mVJmLPKVMhgu5YYeH9kobwFjgghZNz/qrc5MZnk7HeFLq1sOsk7pEj v0DARRfhKqTos7sy0jMR/wgFeDwhDjfEBz3Ggvop+tEIpBFSXAoH+roKI68kW5CS KUnpY3+1pliPisRs5BV6RhYGF3CurFdjY01FXnbgOQBB/gbXjHcYwWcYygkqt/rR 45bjsoGBtB1I+RHDJg1oUy6xcsY5BdJXT1ibiREeXkIa7luScprb51MjycyfI1vx XTmYGIsFrRg1SdvnBsKojvCvqRSzdjsWB5d1UY6Tho1Xg+V2Ex2TzLISvJSYuD98 fSak3D10lZwcx/kCSTv+diaH+OI8e+PcXaSw2JdKf85qbJ9aaIxvUcNxMbs0esLN o3tDLyiYmAujDYWCO+HYXjrchdT36JxP0gLvSKB68zepcCQv/K/n1jasj8oZSZum DyN8PrxYxIdLgilhxlE1z5xygkj/AvfsNH1nkjaHHl+3e3s9NTw= =hRhj -----END PGP SIGNATURE-----