-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 27 Apr 2025 19:03:02 +0200
Source: libxml2
Architecture: source
Version: 2.9.10+dfsg-6.7+deb11u7
Distribution: bullseye-security
Urgency: high
Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Changes:
libxml2 (2.9.10+dfsg-6.7+deb11u7) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* CVE-2025-32414
fix for out-of-bounds memory access in the Python API
* CVE-2025-32415
fix for heap-buffer-overflow in xmlSchemaIDCFillNodeTables()
Checksums-Sha1:
3af4a6221015ea3a061fa72a5e083957a5f00217 2863 libxml2_2.9.10+dfsg-6.7+deb11u7.dsc
2578c0817feae47d78c4f987c7a2a32f87d89517 2503560 libxml2_2.9.10+dfsg.orig.tar.xz
f979f27d6fccfca1eb12955cadf8d0d13aa28d0a 47624 libxml2_2.9.10+dfsg-6.7+deb11u7.debian.tar.xz
32630cc02a2fb4b577f59833ce051a6ff25fac30 9883 libxml2_2.9.10+dfsg-6.7+deb11u7_amd64.buildinfo
Checksums-Sha256:
561b2b317487174399bed51d0bc00c4fdf4c201b082b9f2ca568fabc1eacfbf6 2863 libxml2_2.9.10+dfsg-6.7+deb11u7.dsc
65ee7a2f5e100c64ddf7beb92297c9b2a30b994a76cd1fab67470cf22db6b7d0 2503560 libxml2_2.9.10+dfsg.orig.tar.xz
a613cf6131ae537cd0968dcb43a1b620a6355e1450b06d7f2b4aa2acecc38f82 47624 libxml2_2.9.10+dfsg-6.7+deb11u7.debian.tar.xz
9db7a7b0d63486d47a55a07024980e3d16911daa9e3ad9cf67d3fd3755678333 9883 libxml2_2.9.10+dfsg-6.7+deb11u7_amd64.buildinfo
Files:
61b991a277b6373f9dda9a03e23fc9ce 2863 libs optional libxml2_2.9.10+dfsg-6.7+deb11u7.dsc
4fb60521425df67f453b3c1ff0efbc1c 2503560 libs optional libxml2_2.9.10+dfsg.orig.tar.xz
f190e02e62a2979a287c343cbb7284e0 47624 libs optional libxml2_2.9.10+dfsg-6.7+deb11u7.debian.tar.xz
d9d7eb506392ae16b5a6061393cd3999 9883 libs optional libxml2_2.9.10+dfsg-6.7+deb11u7_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=cNRR
-----END PGP SIGNATURE-----
Attachment:
pgpCQHWwZGkdz.pgp
Description: PGP signature