-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Jun 2025 16:50:13 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: mipsel Version: 2.9.14+dfsg-1.3~deb12u2 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1051230 1053629 1063234 1071162 1094238 1098320 1098321 1098322 1102521 1103511 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u2) bookworm-security; urgency=high . * Security fixes: - CVE-2023-39615: out-of-bounds read via the xmlSAX2StartElement() (Closes: #1051230) - CVE-2023-45322: use-after-free in xmlUnlinkNode() (Closes: #1053629) - CVE-2024-25062: use-after-free in xmlValidatePopElement() (Closes: #1063234) - CVE-2025-32414: out-of-bounds read in Python bindings (Closes: #1102521) - CVE-2025-32415: heap-based buffer under-read via xmlSchemaIDCFillNodeTables() (Closes: #1103511) - CVE-2022-49043: use-after-free in xmlXIncludeAddNode() (Closes: #1094238) - CVE-2024-34459: buffer over-read in xmlHTMLPrintFileContext of xmllint (Closes: #1071162) - CVE-2024-56171: use-after-free after xmlSchemaItemListAdd() (Closes: #1098320) - CVE-2025-24928: stack-buffer-overflow in xmlSnprintfElements() (Closes: #1098321) - CVE-2025-27113: NULL pointer dereference in xmlPatMatch() (Closes: #1098322) Checksums-Sha1: cc2de0ef4e25b076181e21eb762fcf8db232612f 1946488 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 1fd80c6bf4fb862381b203b823df8717c373655c 806488 libxml2-dev_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 36b4567c8165cf671c86236efaf3d4e33b698d02 79660 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 847962e6ce8283d9a8c45a14abe0449b8d15ea9c 96412 libxml2-utils_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 81e448f65c495f21f40a3288f0550112a9fec9a7 8959 libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel-buildd.buildinfo c13c97000f71d31a076c5db2e2a9b8f9e0a409d6 599836 libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 7e4719780ca857839c054cefd85d99592919f449 250864 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb b60e3811abd1b209e2139059e2069e487082472c 174988 python3-libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel.deb Checksums-Sha256: c8aeedd5410996c65827782c219498e3a9a82d55c1ad6c69d39637e09957ef72 1946488 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 195269ecbc5b512f27a7497ea4e9c6f8d385fca031b1ef8274a9080af8d90bab 806488 libxml2-dev_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 0f436defbbf41845055f6135ba59deb55c63c726b2aad796be26557e7a88de9d 79660 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 18a4b7b82bdf37246bb8601c3a8a3682f79161478ef2cef08cc85a4540de97a3 96412 libxml2-utils_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 4c7a348c125f5cc58da4c4297787b71aeb1e166ee3cf39f86ff58d78191aee0d 8959 libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel-buildd.buildinfo 8a04dd286f9f17840de7362fc5bb5a4dea01909cd458332a09514579c3a57b79 599836 libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel.deb ebd3c1d64ab1a03f736d15157f7863e41ec3af4f55158e8715ac832dda34e585 250864 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb aef170c0f228fef5d929060d375758c9c1e6d89fc4059df437d1d4234b997794 174988 python3-libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel.deb Files: b9fd5e98d897ad817c0c23808fdef4da 1946488 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb af503e884b08bac36e74d0c5a7e8a472 806488 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 34069809f64955a3c26e03ba21e1c614 79660 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb 727b6ff2a85b799f8ab9c0c3bc241948 96412 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u2_mipsel.deb ad7b5f9ea766725bf806c0f44a5ac12b 8959 libs optional libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel-buildd.buildinfo f6f55684704c70d7d8bc462ad57a756a 599836 libs optional libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel.deb a26a41cfca807708626003cbb4434731 250864 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mipsel.deb e20f0d6ea0ceb06aafd7c1a4f65d5cac 174988 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u2_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAmhCtbcACgkQmlVdU6AM 9BV8yQ/8ClPebXJgN7lNUVeiE+5PO0l7Fm7IdlHSAegiAGRdAB/vy2ji+Aqb+a1Q i8ddy3LqyC9A7dlMSrQUfZOpuWYQHvuCyqtZtmnJj38xd0IChov7O3Dw7772fsE9 b+mS7vKVKdq5nc1ckUzRxJqJuXM3kUC3Tw2C5Iv5zTqCr9ikR+Axz7lnL/pfx2Ef EWKDQLOqGBT5YjLcRTIZbIMPm57pSCmOp1RbwABGg3FAiVreyv9BfINnAb9b+Ut4 M3FhteBY5rMn3o2zcCwaI1h2adtZlse/yAt017J20g2XykCBtDLs6wO143Tsa88f mBQnxGxeSMsQrui44fMuxFwS9y3Kgc4/Q98PYaBHCfcFj8o7NBDsSrXNgniBnaWu IV7bIiDkllo8TWdnudWroqw6c6jVijOIeoO2csP4hukXQPl2N2PgfB2m/yFBVF+M wrdq9j+LVmkmgmZVjYQtZK7kDapICCa01zA8aBEeB4wekecvrA+Df/x7MQdoahCx kOUV88orzlpaPcIL6QCnZSX09S7okgGhu64Mu4xz8PuhfgRqmDmPE9BgOiFkeRB+ Fp7tnJcL2s4aek11ScHPrRgA5RInBgOuvOMJCiD1GzeVTkGiV9S1Iu048QtONi71 NPjeocJIR3/VC//VoQmctu0wvsADKWFWTiU8puqGlhCtRTvM+Q0= =3InH -----END PGP SIGNATURE-----