-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Jul 2025 01:15:48 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: armel
Version: 2.9.14+dfsg-1.3~deb12u3
Distribution: bookworm
Urgency: high
Maintainer: arm Build Daemon (arm-conova-02) <buildd_arm64-arm-conova-02@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1107720 1107752 1107755 1107938
Changes:
 libxml2 (2.9.14+dfsg-1.3~deb12u3) bookworm; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-6021: Integer overflow issue in xmlBuildQName. (Closes:
     #1107720).
   * Fix CVE-2025-6170: Potential buffer overflows in the interactive shell
     (Closes: #1107938).
   * Fix CVE-2025-49794: Use-after-free issue in xmlSchematronReportOutput
     (Closes: #1107755).
   * Fix CVE-2025-49796: Type confusion issue in xmlSchematronReportOutput
     (Closes: #1107752).
Checksums-Sha1:
 8ca018f95b20fbc708b64bdc8b56056d362641fc 1820800 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 8fece318d787a0405175e3d2aee34b9693e95f2d 687460 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_armel.deb
 be1da9988f12ff67bdaca8694204f81a2b5388e2 76812 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 bf683a7d7799f44373a5d8e902cc80a989ab12c3 97524 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_armel.deb
 8c00b1f7b8246e2a16d8e67e287f539ad752183d 9028 libxml2_2.9.14+dfsg-1.3~deb12u3_armel-buildd.buildinfo
 4b241489200daa9b86ea97dcfcd14d20559c31d4 573180 libxml2_2.9.14+dfsg-1.3~deb12u3_armel.deb
 06b3785eebc855d05cf860e8bb70818e450923d8 248524 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 44957f89f20a3b74841e4c481ecee1ab551ed6c7 177972 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_armel.deb
Checksums-Sha256:
 3c71de28304d9dee527df0b21212a44be42da98740f047d77f33207c86b314b7 1820800 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 5459adad272f1508084feccf2acced8e8e72c6393aaa8a339f8837cbaf53b110 687460 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_armel.deb
 eb3755b97c0fa2d4a44122e310ed44cd15ac9ebc90dc38ccc134d1e36b3ae7a9 76812 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 8d5d8d33db385bfe3ac1bfefc58c8b6e21e79a3645feaa26dbf413f15919f5a4 97524 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_armel.deb
 46d63a956e33990780dd65a279a47936b433ce76e3c336343af190fdc6cf707a 9028 libxml2_2.9.14+dfsg-1.3~deb12u3_armel-buildd.buildinfo
 ebf7a76878a4f0dfec42de3903138d75d3391ed020465ae2e3f2ad19f3c28f44 573180 libxml2_2.9.14+dfsg-1.3~deb12u3_armel.deb
 dd095407d81b464008df872d91d61747a820e4babdf7c2ee13c93f75a92f1217 248524 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 f9b5ad0538672462b353677f2543f166db8a9a5e7a6aa16d3ed03311d4dc9f9c 177972 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_armel.deb
Files:
 30e3d304bf282c6e58503369bbd0cf88 1820800 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 97b696a876b597fa9ae106ee9d3d0cb7 687460 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u3_armel.deb
 cfd0c8e9e404bef3d65e4c651fafda34 76812 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 725af3cccf94a8e75c8a5d0519daa49d 97524 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u3_armel.deb
 056a558c234f1a2bc2880d68c7788b01 9028 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_armel-buildd.buildinfo
 8fa22cca998c0a6e06b711609765a7b9 573180 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_armel.deb
 f5ebcd6189fc64863024ef722a1bd996 248524 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_armel.deb
 9fdc0843bb6d03a606b07c0a593cbf54 177972 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u3_armel.deb

-----BEGIN PGP SIGNATURE-----
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=J0CW
-----END PGP SIGNATURE-----