-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:38:04 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: s390x Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1109122 Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u1) trixie-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: 041fda954fe2276e59a181b72e24aa00255a1d03 1944960 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb bff8484c9a0cde325869b50de4778a18b0ab4e14 780912 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 1d52d31317a80b4a32f3c3fec53394084a170518 77748 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 8ffe7c0d5846159364e260417065297b4f428724 99720 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 750fecd37383e0ed2e1284301a0ac25add0788a2 9017 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x-buildd.buildinfo 3b2a318e4dee6ea7c05221a26861be5a7186e2be 671148 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 7652ee8134c84cd07c1ebf0bd128bdb5487f3b0c 248804 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 16b023ff3c5b5b6abbfcbeffbd235405f305d957 188024 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb Checksums-Sha256: 8380db7615a95c4977bcca9d8a2a83d55f9e3fe85657b303ecea7cf2395ad877 1944960 libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 77cebafd97ccf0c58da96f8cc7ff3c067717d3e53200b110a78815370accea8a 780912 libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 51c6eab36ddcc5f105b9d3aaeaffe51d0cb3b5fb251d323467c127281fbfb2be 77748 libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 843e209c538cebede9008a1ce7d5d5dc20d0cb074eae5bef273ed21afbf96f90 99720 libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb b6967363e46555031695767f492b04b8ce8557ca16829e25832564f3cf8de563 9017 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x-buildd.buildinfo 8753b39805f71b1bb3ac120aac79b5f4c1d93c7941b81f29e93ab61543771122 671148 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 2ec94638c3e35555fa663ddfe89b76d1bdbe70fb94ac324596710bf17915adb1 248804 python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 499cf514c83cbe2eb8ae2200258ecd1e6be19d917249d47a5ace828446b76179 188024 python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb Files: f98d0fb76f30b27697b346e6b36900cc 1944960 debug optional libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 549e02be84c5fa470be27c8d711ac0a5 780912 libdevel optional libxml2-dev_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 368caa1723ad0873f0e0a8175a2ff268 77748 debug optional libxml2-utils-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 2319dbfe6f5a3b83c6bcd0d9be10033c 99720 text optional libxml2-utils_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 9ac6d7fe947a6de8d3c629c7b1df3b60 9017 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x-buildd.buildinfo f340b79a624e2acfecbc44433c76963f 671148 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb bdad3e45b38a3f53fbeccc7ccc486cda 248804 debug optional python3-libxml2-dbgsym_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb 8578b765b1cfea016063685c43aade57 188024 python optional python3-libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmisrq8ACgkQAKOyQzsW VasDCw/+JI9lOUXOgzH0npRKcY2f+WGnAiOwi8ErWTfnUA+FbXcZAc42xS/GlFgU gSiqfowgquQ12Uryl+TKAw9awpW38beO7vukc/xxbr8y2/gNKk2b3/eM6RoCgoHu xK8r+ezlRp4BIS9kHOuON6Di6VXQrT5cgNE87ysGjUvfn7mXI4sSb49GmIFbX1bL 8fuy4SvwVPIWanrHJQ/S+KqxBRthaEm76Kx0LcKdlBKX+Xlt0++ke3IRI9y5DGmv ceumXkvd2QdRIFE7LO+i5qklGBHh6EZiec3u+M+pwLT4YTjvGqR2cJ1/i3LtIRFY vbFR5XpfdC7LBn7RKl2H39K1L+IorIP/30eOx14js/pyz/hOnenIm3zV6Xuy19D0 CdAcBYtzOWHhgyEO+JAjvlJ4lj3YQRtbEwpksgY/xe44Uf/av2+hVxZ9DvEN8hK5 hqVVt0BhYvZDDgBff9VDW1cCM8W1l1MDsO1WwRncev40gbYhUqRRBuu1CTKLTtsF VjxQvrtrLqbaZx+XSDJS5sdSRuwgTiAA+tcA6SXHndWeGhIhbiOxL5dfD1xXkhT/ K4bZUkDl8R72xfjJ48OZ6tyNh0HrMPVMjXOJei22rG2T94mS+h1p3QQSlJOTvatK D6jkCRxiyAWqmRMFGXWo6a3Zy6ocivV4Kz885KiLCEdBRLFasoE= =e5BB -----END PGP SIGNATURE-----