-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 11 Oct 2025 14:41:17 +0200 Source: libxml2 Architecture: source Version: 2.9.14+dfsg-1.3~deb12u5 Distribution: bookworm Urgency: high Maintainer: Debian XML/SGML Group Changed-By: Guilhem Moulin Changes: libxml2 (2.9.14+dfsg-1.3~deb12u5) bookworm; urgency=high . * Non-maintainer upload. * Fix CVE-2025-9714: Denial of service vulnerability via uncontrolled recursion in XPath evaluation. * Amend d/p/CVE-2025-7425.patch to better reflect the original fix. Checksums-Sha1: 8aa03f5e54db82f43bcb1fb8c2fbfba6c2567ef5 2955 libxml2_2.9.14+dfsg-1.3~deb12u5.dsc faae318f77789e93e1bf2606602e0edfa26d9016 47868 libxml2_2.9.14+dfsg-1.3~deb12u5.debian.tar.xz 0db57b46a8ef2bc38928b800c454c693622be294 9954 libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.buildinfo Checksums-Sha256: f915dd8cc228d2c65ead34899a9edf37ae83006c6e78cb0ee141a79fb7d54577 2955 libxml2_2.9.14+dfsg-1.3~deb12u5.dsc ee025505ade2704f221617792212323392e48cf9864ef185fed5712e3a873b12 47868 libxml2_2.9.14+dfsg-1.3~deb12u5.debian.tar.xz 5ff19a3f342242c8996fa27c0418ca9e3fbcc9423301c274a676d1089d7591e6 9954 libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.buildinfo Files: 2578e5f9d26cf6a7bacf323b48e612d4 2955 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5.dsc 552466eac2c1881c7587f5b53697af7c 47868 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5.debian.tar.xz 01e76d8759b831541c20793ce715e7d9 9954 libs optional libxml2_2.9.14+dfsg-1.3~deb12u5_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmjqUTsACgkQ05pJnDwh pVKZDxAAiCrBKj8Zk+jbrvmvnCOpDZDc1daSkGRv3FbHYzivkfjIl534wrcYuHbE 2+L10Ua18EQsbmf/49hUiQLAB2sGUS9MJR7qbiYlxCWiP4lAv+cRak+LB7mvmTdo NMBz0iG4MlOpmRUyLN9H/ghY3MgEpI2jnWpT1ysJiCINYpPD/Z29iMhb3J8ikkVU ajTWj2N9jZraBnZzKNrGjsBpleAl1Gghd6jjFf6sBaYWVhfFCLx/7gB/D4Tm8gJR 13JvFcTTvcSf/T7VaNd+SiutdlSFlV6OKFIbMU3BaQx1BoxK44U4SkoB/ZylMQ1+ Ldbe5Z6VIkUCYGJ/nBNdwNGb/RpxcbbPXsfOW+Hx2FI55cs5TvSGSiSQee3Rshjx /c1rbzMPP3sGtwojYcgWViEpvw1RtAOWgCLX1lqidtD43C4jFdKQsLXlgQJj2knu /7LvMR5aLviwN58UJzuVzXMbzpT+UsA1Ba1HUI2fRlDBkR4hmqKvWmgVMjoTluAz p7NlfDfbAkR0txjcymc/NgfD6S5Sz1ZAJ8IPRv0w0oCRLJ6dB/ZTPD75g1TIl+0d +EjjJkTfcmkcxIISkNQjh7oZNW8FyGNpEvODqfV2fmPr9QLUJZ9cuaPF7aY6WOEK hMEDxGwNXy0lRkEgQnnTpr4pD+VFfPypaUIBQQXSbFWDt1EX6kk= =3eVm -----END PGP SIGNATURE-----