[ubuntu/questing-proposed] libxml2.9 2.12.7+dfsg+really2.9.14-1.4 (Accepted)

Thu Aug 14 13:06:03 UTC 2025

libxml2.9 (2.12.7+dfsg+really2.9.14-1.4) unstable; urgency=medium

  * Non-maintainer upload.
  * Merge changes from 2.12.7+dfsg+really2.9.14-2.
    - CVE-2025-6021: integer overflow in xmlBuildQName().
      Addresses: #1107720.
    - CVE-2025-{49794,49796}: use after free and type confusion in
      xmlSchematronReportOutput(). Addresses: #1107755.
  * Merge changes from 2.12.7+dfsg+really2.9.14-2.1.
    - Fix CVE-2025-6170: Potential buffer overflows in the interactive shell
      Addresses: #1107938.

Date: 2025-08-14 10:46:41.471213+00:00
Signed-By: Jeremy Bícha <jbicha at ubuntu.com>
https://launchpad.net/ubuntu/+source/libxml2.9/2.12.7+dfsg+really2.9.14-1.4
-------------- next part --------------
Sorry, changesfile not available.