-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 27 Jul 2025 01:15:48 +0200
Source: libxml2
Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: i386
Version: 2.9.14+dfsg-1.3~deb12u3
Distribution: bookworm
Urgency: high
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libxml2    - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1107720 1107752 1107755 1107938
Changes:
 libxml2 (2.9.14+dfsg-1.3~deb12u3) bookworm; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2025-6021: Integer overflow issue in xmlBuildQName. (Closes:
     #1107720).
   * Fix CVE-2025-6170: Potential buffer overflows in the interactive shell
     (Closes: #1107938).
   * Fix CVE-2025-49794: Use-after-free issue in xmlSchematronReportOutput
     (Closes: #1107755).
   * Fix CVE-2025-49796: Type confusion issue in xmlSchematronReportOutput
     (Closes: #1107752).
Checksums-Sha1:
 ee15665ff1df5833a3c8de9fb334f0eb8ab83f02 1710260 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 630a773b6c5195c0d3152756ab2c9cc72d660c32 845580 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_i386.deb
 9e04918feadbb0c778fd42e5783fa9bb445ea870 71060 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 107e7f6fd34510e774145fae6e63dc92df78b7e7 99628 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_i386.deb
 e92c4cbfaf3ccbfc06aeeec5dbcddb1aff6cdcfc 9112 libxml2_2.9.14+dfsg-1.3~deb12u3_i386-buildd.buildinfo
 def7d4076307000aa7689764ad0cc009092d0493 720656 libxml2_2.9.14+dfsg-1.3~deb12u3_i386.deb
 5d2575fa700e86dfe359fb0894352d11e9d8c6a1 181740 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 1adbd9aaa54be5bd85cf057529577837a8b04d40 188572 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_i386.deb
Checksums-Sha256:
 2d05e61718ddbcb95220742c899720fce3d2b61b49b20ebe93e0a870cac553af 1710260 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 396d1c33eb89362231d6162ee68c5e88ac69e3d7267089fa9b7a46db08984691 845580 libxml2-dev_2.9.14+dfsg-1.3~deb12u3_i386.deb
 33a3aaf4f9baff02c08de873934815ea50b632f3d04f37883e48698b3529eb95 71060 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 fdda60b38a80e24458370414dd9a45969fa89e738b20f6ff7dad8042fa121703 99628 libxml2-utils_2.9.14+dfsg-1.3~deb12u3_i386.deb
 589b72e246c07885bc05b0b3e3f3edbf69effd3ffd1718cd29712b1445df23f4 9112 libxml2_2.9.14+dfsg-1.3~deb12u3_i386-buildd.buildinfo
 f093e086e5e76a07edb1d1696234a39bf55e829b763ac6f57e899e8aa6c769e6 720656 libxml2_2.9.14+dfsg-1.3~deb12u3_i386.deb
 a9f3fc85cf523976d1e588fff058fda17a01500bbab48b09570b5f99b95853ce 181740 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 0ea6edfcf58cff4160b96d53aaed8d042d1b951b6b3cedfd7f6aee1a60d49748 188572 python3-libxml2_2.9.14+dfsg-1.3~deb12u3_i386.deb
Files:
 b4c68db101b1b0a3b4b0e853848238d8 1710260 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 5131676c07fb8eb3f1a6c654253dcba6 845580 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u3_i386.deb
 73092ab1b71cce426d6a2074ecb9673e 71060 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 778cfdb106c9dc8e84a5d822cb316721 99628 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u3_i386.deb
 b6065bcff871aa07dc296b4d2b190ad7 9112 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_i386-buildd.buildinfo
 6c9a4441c04ccf8a2b23a42dfd13ce26 720656 libs optional libxml2_2.9.14+dfsg-1.3~deb12u3_i386.deb
 e6b5f9a62409e20e84ed8721cbda45da 181740 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u3_i386.deb
 002727031ede48fd74e7387b341818ef 188572 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u3_i386.deb

-----BEGIN PGP SIGNATURE-----
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=ANyc
-----END PGP SIGNATURE-----