-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Jun 2025 16:50:13 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: ppc64el Version: 2.9.14+dfsg-1.3~deb12u2 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1051230 1053629 1063234 1071162 1094238 1098320 1098321 1098322 1102521 1103511 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u2) bookworm-security; urgency=high . * Security fixes: - CVE-2023-39615: out-of-bounds read via the xmlSAX2StartElement() (Closes: #1051230) - CVE-2023-45322: use-after-free in xmlUnlinkNode() (Closes: #1053629) - CVE-2024-25062: use-after-free in xmlValidatePopElement() (Closes: #1063234) - CVE-2025-32414: out-of-bounds read in Python bindings (Closes: #1102521) - CVE-2025-32415: heap-based buffer under-read via xmlSchemaIDCFillNodeTables() (Closes: #1103511) - CVE-2022-49043: use-after-free in xmlXIncludeAddNode() (Closes: #1094238) - CVE-2024-34459: buffer over-read in xmlHTMLPrintFileContext of xmllint (Closes: #1071162) - CVE-2024-56171: use-after-free after xmlSchemaItemListAdd() (Closes: #1098320) - CVE-2025-24928: stack-buffer-overflow in xmlSnprintfElements() (Closes: #1098321) - CVE-2025-27113: NULL pointer dereference in xmlPatMatch() (Closes: #1098322) Checksums-Sha1: 9b3d00aabe0d64451402a96ba5156bdfe70b960f 1958900 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 917a433bf81560fc4483cc9bdf795878048d3249 854304 libxml2-dev_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 30b9c91c36c0c897cf06933f92313c978cee5a52 80440 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 49e62f741a795f38a42cd8f350357361c068f9bc 100584 libxml2-utils_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 13281d4b4ba3d71b3e73fcdb7c8948e6b771a70b 9192 libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el-buildd.buildinfo cc113d9b01564b20ff2afa14013a24b9831bdd7d 723484 libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 49708cf15488f3a1bc62dda1d1746160e47e1749 253024 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 92acb8b3a7aad4b4fc48ef9c587fa90cbbde8417 188252 python3-libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb Checksums-Sha256: 318b86793569c97d779a5e0e23ca01d896dd5f496765cbbcb8fd570901b15ca3 1958900 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 4fbea42c2f43e190e3208a236043a07693c5aa20922e31d56e87f69f4d7055c9 854304 libxml2-dev_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 5c73698d722b590548798acafeea0e59c1cddda00a077f97e3ea7fda10a27a10 80440 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 51b5850549682f62d1f62bf629a1d2d0365d401483e375d8b20d68b815a1c54b 100584 libxml2-utils_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 9e5964004b1d51b76a19854f903738a0024f8753283dca7b21a1073feb31842f 9192 libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el-buildd.buildinfo 73a1ea7d464954dd8773abc7b7aaa0728bf450ff0efa313e766160b24d9f07b6 723484 libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 6b29a8708fd30e613dc9641b75efc7f6bdc43239f0507793b984257d757c6342 253024 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 3a3b8082cf8558471ecaa64d9add8a957d014f0d77db2470d2b4d5fa11f81520 188252 python3-libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb Files: 553786e8cb19f6c924e9a8ad4642bcc6 1958900 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb a934fe75f3e2c034dc8c25c7d26063cb 854304 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb f672af00b81720d8f75a70b08f903d77 80440 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb a0218da0ed4a6541fc1239047614700a 100584 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb fff1edac95406af4c3d45fc7515eb28d 9192 libs optional libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el-buildd.buildinfo 5736859996ca7417ff6115bdb8f45bd3 723484 libs optional libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 5f7ebdb5f0864af38f29965700959caf 253024 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb 2d7425285bc653917fc84f3faad6ae13 188252 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u2_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZAv/jpGRqS40qyb11oy1TpxF0ZAFAmhCtXcACgkQ1oy1TpxF 0ZDrLA//Zod0M9O+c8jl59HDQi5aMFQFXpUJ3o+g86X1ooGaIhUx5rZAzFNx/2Cr E/T5Czb0qFfXhvmTXFK2DxAfeO6qE0pFxvyi9tBEV8MEOznGq2N3ROPL74vTyXT1 bX9hhg/uoW/3XntvAl99e2+BhAvr9iAsUpUOGYFoKbqhJBPGTBwqiDchbGJMK8Zd tSeJVBWCdAntv350776Y76YK9dYoya5Pc5wSodDK8hoTRxEGEcgb30Z9Ism2VkG4 WeCN904fO+uTUnRI+vS48qTstCMypWeWMvem0+rZgPNXPne/0AXmvy24/IzljhHK dWZQtsXZne6dFwB6RPyV7oQMpYx2dP24GUw7i3q63nCd48Mh+ThPDqM1R2IUXNeP 27z/NR5C/9hcTvRPP8fqd6WCXJhC4AyBFvVLW6iirOYQXzhCuUsUJsQjYTSx6JFC I51P6pNJGJrlYsWRVxeK6304vUMNgrl8gQ/dIcgYemhc7KbA45nXEJD7Ae9sWt6f pX2RczvB+t2dgt7y+TexZg/Ag7maqjTRZNYJfxgK+5yD19It8ye5jiraa31tV7ew avfAdZEngUlru2VP8KVo0sgvDMM+j0X37u56gJ/5hKNggt9Xh9FxaE1KSAFqFrkb lSmX7fJAcWzOcPmWSRui447RBDm9FgCcV7Ttvql82TnjlrgCiF4= =sb2E -----END PGP SIGNATURE-----