-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Aug 2025 19:38:04 +0800 Source: libxml2 Architecture: source Version: 2.12.7+dfsg+really2.9.14-2.1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian XML/SGML Group Changed-By: Aron Xu Closes: 1109122 Changes: libxml2 (2.12.7+dfsg+really2.9.14-2.1+deb13u1) trixie-security; urgency=high . * CVE-2025-7425: heap-use-after-free in xmlFreeID caused by `atype` corruption (Closes: #1109122) Checksums-Sha1: 3839e979ccc0144aad08518d43cfdec6e78bc2fd 2721 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1.dsc b41615e638174b4e36845c68d4b305dd6a6b541f 2351200 libxml2_2.12.7+dfsg+really2.9.14.orig.tar.xz dceb3a6db8211dac7c078eb82766d031d7d812f6 48728 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1.debian.tar.xz f2ec2f458c3dfbb2bd0420d9dbbf584602a7e6b0 5305 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_source.buildinfo Checksums-Sha256: 1b5ebd1dc73f27d0633797781d3a9304c8d25a4ace8ca32c44a8247757e92b0c 2721 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1.dsc 4fe913dec8b1ab89d13b489b419a8203176ea39e931eaa0d25b17eafb9c279e9 2351200 libxml2_2.12.7+dfsg+really2.9.14.orig.tar.xz 1d83110ae29224c4e74d16f74296491b769120d3fdebe5c893c3389e49e4f51e 48728 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1.debian.tar.xz ed104570a7fb042fd4e633dedaa125fe0919d60e218454317252c1005ad7f051 5305 libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_source.buildinfo Files: b1a74d43b23c036625ce057220b0f40c 2721 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1.dsc bbcae2f48d1c9b1413ef953ce87e9346 2351200 libs optional libxml2_2.12.7+dfsg+really2.9.14.orig.tar.xz fd365b1a632edbf27e2906e87ce92ebb 48728 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1.debian.tar.xz 948bfb2e87ca207fc0db0394e6b5ebfc 5305 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.1+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEBLHAyuu1xqoC2aJ5NP8o68vMTMgFAmisTAIACgkQNP8o68vM TMiSGgf/ddTaURtgG0OhaCyEnRWy28e6y3hEPx0n0Ke6+Ct7y9cb0Pn6FUTlDKrI Jvj7fkQ8+s5l6B4bsBADMFBB94s8S8xZtvW0Lp7+K5xZS1ikxjujWy6lUhH8pMBH tpTTGCDwNWAfSdzJaabqYjhojuuqa0k4oJ/nNTMoUTv2SDHU6fZ3inmmeXcF67lv koaJmNs3heKS6nrNEcaRfntwi0tz4BakXv5VdYkQWMGS8Z8XLTDjzrioD4SiD2T/ ZzPNvBFJIGdxNtL0wdHIUpJirYybyIrTpkPYZY1XzZLHHymXdCJK+x8ogtbL48uQ 9eAFu4MFlaFI8Ei6eSludcsP2gZe0g== =E9vx -----END PGP SIGNATURE-----