-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:38:04 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: riscv64 Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: riscv64 Build Daemon (rv-manda-01) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u1) trixie-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: 8aa00fd8ecfa1bf80e348ff34d6dddc05bcd1b4a 1825188 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 4dcf82ed0ad820cac24b39908bfb1166bd358d46 1948172 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb e3becfc0b48257837795d624e8e8140777c825fb 76836 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 5b17111a8a2c0dffd96b06886576c93135f22eb1 99572 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 40482ad82bcc67385edabfca65cf856cb57125d3 9132 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64-buildd.buildinfo c3372735f27dca0dec2a4bb5e6583a04f342d64b 708268 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 5c37c90f37f47a43f8b5c6d3ca5465948add85fe 226796 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb a56a112c99ab5088b9d4fcc535313229fe1a7f4f 189688 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb Checksums-Sha256: 598aa1f220bf145a8b7ffd961d12f79639b665afe1154c94610317c0418764c7 1825188 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 7c5d1edb4660b4e746fc84935b0ea79b560f1b96c7b81a05ee3c5ae4ffdda8ad 1948172 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb e11a65eeee00783d23d17d236f5fa0511887ff8fb9857d1f6eec246ee3a0b3f6 76836 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb fbf4b6705181214feaf8ff79610d99d76c525be1b79f4f54caf9142e76dbfc1a 99572 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 97b9f2189be2567f8e7e05550e76d5ac1ef28ef682f66c958020b695e160c479 9132 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64-buildd.buildinfo 42c73f71f2b44848ed28f955409bd36ae6482c3bbebc8f79c9ee02cc0be3067d 708268 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 3ff6dabaffef8fadb6828c5b8b315e25e67bdedc5d7733e3c2665c72266bc0b3 226796 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb d39e9ebe21eec0ca42c782734f89ed2ab09e7f70a98d9683d41c190039c91b59 189688 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb Files: 113ae790b7f492920bc36a2c2eaccdc9 1825188 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 1fb1dcb75f8f9d88f5f9d8ea02584b0c 1948172 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 679833deaf3852900ed86fe0deca78e3 76836 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 75edae3a6a0c4fa7db537b73ccb027a7 99572 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 042100c2ab6409b5a76040b3352a7a38 9132 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64-buildd.buildinfo fa53f058db32679d420f85e06d29d2da 708268 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 2ec42a4c773a6c85351645056d704baa 226796 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb 78577ecf15bdfc6c46ed78d42d60ff5c 189688 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEr1DoflQE5rwrZmkOdH2L+FrKb9gFAmisVnUACgkQdH2L+FrK b9iopg//fwaa9zC1d0JOEgmRquRQi7tqqGM54fbwvY3BnDX7jfoN//YozMPBx/GB o2HXjpx4nugD0oslf9UGgfUwGNL05gM1D1u37wUIrFjWWeUuX0F/T2ZD/x6yfCxf eveftCaL3U+PE4YF0iNSrvlvAnqOYDmYRIk1i6gD4NAX8EL4zEhI02xh/UchGROA lRhKs5KGRLrmwaNvVqkGgrb6DU/iXB/Q0VwkOYdRwUoKsd+LkIUaDkQ80X5OawOF ZXxsiQr5lJJG/lnCLzCn3oybK0EGBQLlkK3LYRUbBxaiLHW3/az4gr+qlYcF2CMH 0kPlmAdlP8IOI2cSDfL/GQtWH0yRYHl5tEe8TuOmTrW3/xItG+oyV0Y5WRGKuCNI J2B1GVGc1URL/ydEzXzWEXZ0NUF5gjOdrfQx/a39GVCSD4jwINFIiTeFm9ZWI/SK F3Xp1h8qC2Ixq7gcpZkW3QV3tNp8yKGxHqW77363Y5NzR9q4T5R2dKUk6/QpVTFi f7QYRt4bHBGvHMyRfAWPJ7+7fd+ijHivyOUu4COvsIvqjMzyrbuLNImoegYDeDxp WBWt/2Ek9ivlI7LSXSysiC0t6C2i2aFcljQZWXgxIrOGatgFMxsDuK++i94aAR98 PbaB07N86h1s+J6wDalYSgfcKp5IJzTt5HHN7Ft9XxbIigD8a5Y= =i33M -----END PGP SIGNATURE-----