-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 Aug 2025 08:04:03 +0200
Source: libxml2.9
Architecture: source
Version: 2.12.7+dfsg+really2.9.14-1.4
Distribution: unstable
Urgency: medium
Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org>
Changed-By: Matthias Klose <doko@debian.org>
Changes:
libxml2.9 (2.12.7+dfsg+really2.9.14-1.4) unstable; urgency=medium
.
* Non-maintainer upload.
* Merge changes from 2.12.7+dfsg+really2.9.14-2.
- CVE-2025-6021: integer overflow in xmlBuildQName().
Addresses: #1107720.
- CVE-2025-{49794,49796}: use after free and type confusion in
xmlSchematronReportOutput(). Addresses: #1107755.
* Merge changes from 2.12.7+dfsg+really2.9.14-2.1.
- Fix CVE-2025-6170: Potential buffer overflows in the interactive shell
Addresses: #1107938.
Checksums-Sha1:
12e4ecbe6524acfd20a51942973922e584c8b708 2997 libxml2.9_2.12.7+dfsg+really2.9.14-1.4.dsc
e518b64690425472b0a2cc33402fb7a51695383c 43700 libxml2.9_2.12.7+dfsg+really2.9.14-1.4.debian.tar.xz
24aae41ed64447904ae450dffa6140ccc6395210 6209 libxml2.9_2.12.7+dfsg+really2.9.14-1.4_source.buildinfo
Checksums-Sha256:
4e9a58472126ae81fafd8004dd7b53dbb9174498be714e0ee512bc1ebc158adc 2997 libxml2.9_2.12.7+dfsg+really2.9.14-1.4.dsc
4737f2d64d4fe77cdb823349a5aad95a4f5ca5544cb4c06f81911a7ec9578e80 43700 libxml2.9_2.12.7+dfsg+really2.9.14-1.4.debian.tar.xz
ad36c86cf1f6928d46e8788574e4aafc51ec58bac53230afad7c46d48ef4a46f 6209 libxml2.9_2.12.7+dfsg+really2.9.14-1.4_source.buildinfo
Files:
87034408f813ad42bc1b88731452af51 2997 libs optional libxml2.9_2.12.7+dfsg+really2.9.14-1.4.dsc
c934474422a71eeb9d9d9027ee80631a 43700 libs optional libxml2.9_2.12.7+dfsg+really2.9.14-1.4.debian.tar.xz
4264cb1dc06c3b57d50b3c972aef9100 6209 libs optional libxml2.9_2.12.7+dfsg+really2.9.14-1.4_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJEBAEBCgAuFiEE1WVxuIqLuvFAv2PWvX6qYHePpvUFAmidfTUQHGRva29AZGVi
aWFuLm9yZwAKCRC9fqpgd4+m9clgEACIaEhThlz8FiySCrkL9RbiBNAAC7s55gT/
9KFlwRlqKklY4E8gJAyDg9lSB/UO2o/fA+uhNUuSsBlKyhucRvham3JS7X0ksz08
nS2Ekm0pmi4dqnVHJhXn5RNRdlPP2Ka8cR+AezSInU1tMZuHEf7dcvNgg57Km+Xj
H/LTkan5KfDmBrRa0pYIr1hOx/rA2wPbh5foQZ4tkaE2YT7K5loGfNb0zhYbINhU
fN3mRccqAmibsSBC0P6d1Kk/IUdvsbzgTuqg6iaCi5jxRQr+fucAueWDy3tD57wD
7ciN6jnTOAp/UDsZXOQMdYJ/VxW/8ENVXOsj7ocsdtxwmzjJ3I9WxyGCO9digbEn
qPN5n4sniG4V+bh8yJSRyTc9xI/0stgraoJ8jxbNEKt0KTkRSJ237fhnClzCpcbW
dj04+CGn+3Uuu7Ier76ZR7s9sStvmJIsj6p14Acn5sdhknCgZ2oZgtrPWJIEpGEF
3a+/Vck6azMHK2W60XIBgPbYedQuBRJzazKbn6xbLHbS1T7yPh7KEh7Lvd69aVUO
flQmINLWzDmFy88LbBaURAwTNzHKIKKyIhpeTdA4Jx0KPLHRebJIKpehfL+RHyhv
DLo+SjZvmGe0kjAVYbk1a5iCTv51hSLuyQduY6tQxEdiWKpNFnwHNii2/LGgXqd2
0CA3/+iFaA==
=brQD
-----END PGP SIGNATURE-----
Attachment:
pgpj7gWOMveV_.pgp
Description: PGP signature