-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 27 Apr 2025 19:03:02 +0200 Source: libxml2 Architecture: source Version: 2.9.10+dfsg-6.7+deb11u7 Distribution: bullseye-security Urgency: high Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Changes: libxml2 (2.9.10+dfsg-6.7+deb11u7) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * CVE-2025-32414 fix for out-of-bounds memory access in the Python API * CVE-2025-32415 fix for heap-buffer-overflow in xmlSchemaIDCFillNodeTables() Checksums-Sha1: 3af4a6221015ea3a061fa72a5e083957a5f00217 2863 libxml2_2.9.10+dfsg-6.7+deb11u7.dsc 2578c0817feae47d78c4f987c7a2a32f87d89517 2503560 libxml2_2.9.10+dfsg.orig.tar.xz f979f27d6fccfca1eb12955cadf8d0d13aa28d0a 47624 libxml2_2.9.10+dfsg-6.7+deb11u7.debian.tar.xz 32630cc02a2fb4b577f59833ce051a6ff25fac30 9883 libxml2_2.9.10+dfsg-6.7+deb11u7_amd64.buildinfo Checksums-Sha256: 561b2b317487174399bed51d0bc00c4fdf4c201b082b9f2ca568fabc1eacfbf6 2863 libxml2_2.9.10+dfsg-6.7+deb11u7.dsc 65ee7a2f5e100c64ddf7beb92297c9b2a30b994a76cd1fab67470cf22db6b7d0 2503560 libxml2_2.9.10+dfsg.orig.tar.xz a613cf6131ae537cd0968dcb43a1b620a6355e1450b06d7f2b4aa2acecc38f82 47624 libxml2_2.9.10+dfsg-6.7+deb11u7.debian.tar.xz 9db7a7b0d63486d47a55a07024980e3d16911daa9e3ad9cf67d3fd3755678333 9883 libxml2_2.9.10+dfsg-6.7+deb11u7_amd64.buildinfo Files: 61b991a277b6373f9dda9a03e23fc9ce 2863 libs optional libxml2_2.9.10+dfsg-6.7+deb11u7.dsc 4fb60521425df67f453b3c1ff0efbc1c 2503560 libs optional libxml2_2.9.10+dfsg.orig.tar.xz f190e02e62a2979a287c343cbb7284e0 47624 libs optional libxml2_2.9.10+dfsg-6.7+deb11u7.debian.tar.xz d9d7eb506392ae16b5a6061393cd3999 9883 libs optional libxml2_2.9.10+dfsg-6.7+deb11u7_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmgSRx5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR3k+EAC662oDaOIn9ngajZC7Nopb6FuaHupU tOZTMD26XZ4DT+Rbh7CX8jsEiYVsFVOCGwLQ6xdrYP3aT4b4kzcNN3gXbyUPSILl NACxpz6WcseR0V0upE+5Id2SiTCkVm+E85QrS7GA8hsYqdfeFh5WxxANdAiNVnRk 3Cj7BUg79FYMTXvwU9raNvqMyglI2DH+KDuuPYVFVRt6LbO8MbmLQFldEOhClttH DXmJ8XZ3T+0VIjXOIrO/s1i7AKV7GREu2xfjs5XbuIU3PNy3//XiGfD9LAFjH44H UbkOWe2C87DtJ7K6dtyl5XeoAQtdvP26U8Xs7v6fHOaZxYfbVyuZdNkUbsthbLWU 0NeTEJ1AovpYfzV2N2QiA0IowPBn5qlOLgHF/v3DX5IL3t0kbvgJgKF05MG4Vp/R BtHv1/BS1VKA6W0ETSx8uDjpihzVvW5tWl5+Z8PLZpWKBNmRbBCi4rPwjgpoyYuY gfjoXLpXveB6sdy++8cfHMOZKddX2MIsrmvR30r/iyAZJGwxdEuXV0uE/dm55sFe 2hSgaTBmoeJlbXzhqk/YqY7V2wG1kfpCPxN6kFBvVU2C4gm8wImuNG6sDgAxGkjq q28kWIyYTkPUO+6DNCXc2NAYhSAl5LuYTYIeeaAtZ3XYDfIV3J5pBeE4LuB90HM+ ++j/L+MW0QlDYA== =cNRR -----END PGP SIGNATURE-----