-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 06 Jun 2025 16:50:13 +0800 Source: libxml2 Binary: libxml2 libxml2-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym Architecture: mips64el Version: 2.9.14+dfsg-1.3~deb12u2 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Aron Xu Description: libxml2 - GNOME XML library libxml2-dev - GNOME XML library - development files libxml2-utils - GNOME XML library - utilities python3-libxml2 - GNOME XML library - Python3 bindings Closes: 1051230 1053629 1063234 1071162 1094238 1098320 1098321 1098322 1102521 1103511 Changes: libxml2 (2.9.14+dfsg-1.3~deb12u2) bookworm-security; urgency=high . * Security fixes: - CVE-2023-39615: out-of-bounds read via the xmlSAX2StartElement() (Closes: #1051230) - CVE-2023-45322: use-after-free in xmlUnlinkNode() (Closes: #1053629) - CVE-2024-25062: use-after-free in xmlValidatePopElement() (Closes: #1063234) - CVE-2025-32414: out-of-bounds read in Python bindings (Closes: #1102521) - CVE-2025-32415: heap-based buffer under-read via xmlSchemaIDCFillNodeTables() (Closes: #1103511) - CVE-2022-49043: use-after-free in xmlXIncludeAddNode() (Closes: #1094238) - CVE-2024-34459: buffer over-read in xmlHTMLPrintFileContext of xmllint (Closes: #1071162) - CVE-2024-56171: use-after-free after xmlSchemaItemListAdd() (Closes: #1098320) - CVE-2025-24928: stack-buffer-overflow in xmlSnprintfElements() (Closes: #1098321) - CVE-2025-27113: NULL pointer dereference in xmlPatMatch() (Closes: #1098322) Checksums-Sha1: 671e9d3299a70bbac0d2b950e27364f95b56ec23 1989724 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb db1eab9abbd8a90154db5b88fc77defe2f171e72 810208 libxml2-dev_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 913520aee6e1c5331d0993b273a30a1d3dbe72b2 81132 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 28d66d1dea53f2fac6b290459ff6dc18db386441 96560 libxml2-utils_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 68215f8eab3241183b1bea376b82cd0a9dd32c51 9012 libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el-buildd.buildinfo 52d00ab30db80ee2edd58fd2ec9365aa71aff754 601768 libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 32ceda0c03846b85eb357898fbab5e9974b27893 260328 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 065fd3db163f4b97071503d8f5168e14d7e9ce13 173756 python3-libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el.deb Checksums-Sha256: d1a8cae669351f240e18c6df995e7c353e6527427c4c627dcc8aef4b8638bff1 1989724 libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb c1fa07cec6d3b8ce1b835176e031588c96139b104aeb9754bc853b35c4a7dfbd 810208 libxml2-dev_2.9.14+dfsg-1.3~deb12u2_mips64el.deb e6899c88be3e6f1be4227d048bdcc3fe2b637d42c9155cc03b846ce3cf0d04ea 81132 libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 437ccc1760a8f10c4dd197c6be7d3afc76c707286c03411c5a458781e053d184 96560 libxml2-utils_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 2045ab153a28f4878b81684a5b150cab97729617d87baa9323bdb457bf5d43ed 9012 libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el-buildd.buildinfo 4115fcb535299a9e821c158cf8bbfd6d2b7b68d142e39e45b80254d23f44b6c0 601768 libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el.deb a1e7acba462f4440d9b81e99d26344138d6ec67181cab144a2c169e438f12be3 260328 python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 326eeab3ccf9746a1673208331a308fba34fd8501321bf2edf3f824851027da4 173756 python3-libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el.deb Files: 3db6e68e64675e7ea7029195463483a5 1989724 debug optional libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 4ae3f21dd88e0fa70cfcbaea8405a96f 810208 libdevel optional libxml2-dev_2.9.14+dfsg-1.3~deb12u2_mips64el.deb a0afda6dbece9e2e1fac2f4a585021d3 81132 debug optional libxml2-utils-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 4b678b9ada3e61cc4b32a0847747ec40 96560 text optional libxml2-utils_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 9910efd9b659ff01c6bd5649218cb307 9012 libs optional libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el-buildd.buildinfo 987f42f690b59ce2e2405ed05c5ccbda 601768 libs optional libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 327564ae6306e51810ed10bc615a3324 260328 debug optional python3-libxml2-dbgsym_2.9.14+dfsg-1.3~deb12u2_mips64el.deb 57a52619b182f7bedac2d39f85dae927 173756 python optional python3-libxml2_2.9.14+dfsg-1.3~deb12u2_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEesE3YcWKZXIkRPMemf85J+x5/aoFAmhCtagACgkQmf85J+x5 /ao6Tg//cwnrFdzypJXCg3ckfRKsdvmSzKjqW0MaykwwPw0q1D5Y0cXSxardb3u3 6CTLnp4kkE51fLkWcUfScfxVegA6J5j+XLswx30UNtoHbsJVz0Bw905pNN6OzW5z djXcVteksMS7g5brqjxUoSWdGgUg1fAgzyHfAPH6cYdmyBV5oWhmyHiYJqpBFOLn d73rG7qrTGLIZlQVtlrqZrDnDEK7pSBl3FO9tGHruuq11zsjn5ocIabo/zHYF8we wQqUm2Gc4u/zgsDh3UMWILhDh6Reu4bMfDqp9CIJ/MKKBazhJ2Z386XmOiKScM97 0t8unH0y372IVgoxD49+s98hP261H/BQ+lLgJ4CrQo7aAEapPSxiKvvOZVVm4/Jd RmFyHh2y1qwv0I5OTRFA3SWzpekZiHHoSNl+9LwjOgrpI2hkIgpE2+3mkGp7n5p/ F6/KxyTA6UMpPQYFyxIdgJ/2WfsSc4L3ql+f0+SH8HFBOapf2UTUe1NLidN1a3zn EgSSrT6nvuKD+donkY9HezS8m7+FruQLSwFcPfJ2REjvWKgFyN5Ych4HJwtPnhsO 9lrzGumKxqlbUayV+LaU5cwbOdAoN0WkOo44b4k07XyIUAAKaNuX42jtlNaa8MjF ZTM7GRo6AAVvIMne4DMF8wPCOY5b8fd64K3GAaU79y9QprZ9o7o= =ZJtP -----END PGP SIGNATURE-----