• Accepted libxml2 2.12.7+dfsg+really2.9.14-2 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Fri Jul 18 13:50:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA256

    Format: 1.8
    Date: Thu, 17 Jul 2025 17:09:57 +0200
    Source: libxml2
    Architecture: source
    Version: 2.12.7+dfsg+really2.9.14-2
    Distribution: unstable
    Urgency: medium
    Maintainer: Debian XML/SGML Group <debian-xml-sgml-pkgs@lists.alioth.debian.org>
    Changed-By: Aron Xu <aron@debian.org>
    Closes: 1107720 1107755
    Changes:
    libxml2 (2.12.7+dfsg+really2.9.14-2) unstable; urgency=medium
    .
    * Security fixes:
    - CVE-2025-6021: integer overflow in xmlBuildQName()
    (Closes: #1107720)
    - CVE-2025-{49794,49796}: use after free and type confusion in
    xmlSchematronReportOutput() (Closes: #1107755)
    Checksums-Sha1:
    8f462753bfd03904871b09ca211c715bfcced930 2681 libxml2_2.12.7+dfsg+really2.9.14-2.dsc
    1398a05419924cffdea3f2a1841ee7f68f16c00e 42264 libxml2_2.12.7+dfsg+really2.9.14-2.debian.tar.xz
    e997f26db01de4857bf5b74219c44ae77c1aa5eb 5666 libxml2_2.12.7+dfsg+really2.9.14-2_source.buildinfo
    Checksums-Sha256:
    89ace991e5ff090efb13f16fdf80635dc50c2de7a8996ecae890372fcf9616a2 2681 libxml2_2.12.7+dfsg+really2.9.14-2.dsc
    616a554f760d44e3f5a4947bc096d22f3ed8b66df17ff7e9affa81abe1d9d1b6 42264 libxml2_2.12.7+dfsg+really2.9.14-2.debian.tar.xz
    4fb8285629d5239c1df68e1a752222ec4147635168ffc91fb7533f3ef8f34a09 5666 libxml2_2.12.7+dfsg+really2.9.14-2_source.buildinfo
    Files:
    a0aea9405acd079cd67796c3fadc564b 2681 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.dsc
    04cba6991f6354667a8382571f5a53a6 42264 libs optional libxml2_2.12.7+dfsg+really2.9.14-2.debian.tar.xz
    e8380eacf3bcd5a621d25f32f180b45a 5666 libs optional libxml2_2.12.7+dfsg+really2.9.14-2_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQEzBAEBCAAdFiEEBLHAyuu1xqoC2aJ5NP8o68vMTMgFAmh6MLkACgkQNP8o68vM TMjxMQf8CkvSnZylT4T2YHl/JyUao9ei0IstJ3GA6S1aqy7VQ6/Y6s13DheZ1SAy omMEFeipZTCEMDIVHYD3TYSVk1Ts9Qd9IbzrCMtYeL0vIVxhTAqneenSxQCjFROa mJ6NYkGZIZ+rY5ZmAXw5rFA9uRNov3HUv2FOIHqtiXheYYzdAhIR7naeVv3cKrmZ NfcfIOw6bJrfZFgA7bqhR9YxbAwRhG11j6txxj0lBcIO1/fl2U4HteAF8+LDzunK 4sfcJ2GNhKsneyzA+y4p6/G9f/9hq9aMY11J2o5eMf4BDEyAqaJfrgrf3PMzTpWe 0Y3YcLQklXYsCsbxfQixYb/cAyX6cQ==
    =hsdJ
    -----END PGP SIGNATURE-----


    --==============79134057845187228=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaHo0xwAKCRCb9qggYcy5 If4KAQCqqoBPbEj0x+A/vKmB3pGmYzAhmV4wi9Tk+ze7+UucywEAsoNaxHcZnbQH IlAD5ISIx9ZGzpCUlnSY1ltOsoNp8gs=QEdT
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)