-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:38:04 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: ppc64el Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u1) trixie-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: eb46e43debb1a3867a696262ff83a0f616509e99 1999100 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 60c85b383424150daa468960069fc881fbae85dc 863152 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 4f9114c29fa53182b1823167e1a260088a4fe105 81032 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb c796fe4815c00886f032f3a4b60ff3dcdc75fe98 101460 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb dc2773e9dd47b55160fb167b2006c8ec6b1be030 9187 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el-buildd.buildinfo 75614cf88efd42a2cbe1d190d34c6417ad04eb10 729772 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb d984cf302afc43f91c6bc22f46aae885ae930ec9 254716 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb beead6a09f690f608a34e9f3d083a82db1e0ec43 189812 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb Checksums-Sha256: bb9cbd44bee00962eb77854898361c0ec3994dbc55096c9d91a268a35f4cf141 1999100 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 7125d9a864da531bee86b1ae105aa28ed71059b0c03be631ddf703301e3b1214 863152 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 1443b90f86ce64fe4bca72c64b62e67b74635cabfea0f9371154b98c45141b13 81032 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 1ef23374442ac10fb2acc1babaf35c0cadf60e14d8a3a8ec45dc90773f5b71b5 101460 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb a89bfbc90020ab0e07acbb570780302ccb0d4a1332fd496583ac057f8bf94993 9187 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el-buildd.buildinfo 30ca57c8a6987dd2db3ba36f17d06db4bb3b0ef747a029f731756f7b9208db6a 729772 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 1d5a654959f0d50ede1c098c330be38acbe124a121f5113dfdf585a308caa6f1 254716 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 0a32642be7bcdec33fe7631d085a627540e5e224a71b41c0d3b6077ea5eae4b1 189812 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb Files: 3c1c191c2403e18f38d4fb755cd4c86d 1999100 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 0e32d5309125cf089e88bdcea4815ae9 863152 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb bb5df28fe19d1af854bcfcede27d6b4c 81032 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb d2fcc868b9c3d4b00c8d13afcc4eadad 101460 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 3bd02389782c589537abf9c45c5abf5a 9187 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el-buildd.buildinfo acbd97609574da2c09f488f133857588 729772 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 95b8b82da5cdc70a2956388f58867374 254716 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb 72b5b1ed4196c7cd3b4ce959661e8411 189812 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmisUlUACgkQOrVShFbI MGHKIhAAj7PR8sZiEp+n5+w4SQ/RKnS6kYVTdSlMIKxYEQ3ARWHT80AzyX9A++vv srtuqn9eXFoTO3DGJDw3z9VXikU4B3w/9kl/w6UjM5x/O6iFHBy1cd+XUTlXeE1z abYAKsCPb/YGbKQrfBu5wyvtw96Lhxy0UOiiA9w9On/GhNetVougjKTpHUjmZxdT knF06g2x5gXYgn2lQsVEejifqOi9mBA46/RlTbf3H2QjJjRUSLggeOkS0WdS3ggW kdvaBKN/14ztPLQSVH1RwJ+9K69qEEMeUJd0cJnYOgRaJfuymG4C9KMfVvRmQBrh Ub1Tnt/mhzy69DKfQn6I4jj0p4p0wA6TO2/+PN7NDvMg/Cn6/2nWBQC6d+BSyCyO K/UPPWHLPAamtjjk/5Q/OqQDi7Szz5KlkoamNKAe/fOHeSEyXdEFRnrW2UrbDEra 1JzzuNMdp7W1C5Kb/muD8CqpEBvJ4v9aVCoqlh7SJXqa6Kgdwa2C/LOoanjZQp8W BWMVnsOcCBvJ9tDH3ZOlRFUECY5P3Er/iLBnuMdcMjU1L1P4v8lYIwJRWVQU/NH0 Bkx9qVlWLVvBuXPbgN1IWqb7lobwDemua491Q2nR381aLTv29YCcj1d3XqJ15vIL RirH/syT7q1EUmS1oMYGrb0ZTluUhCHW8G3CqLECefE6vHIw+3A= =5t8S -----END PGP SIGNATURE-----