From foo@bar  Sun Sep  6 19:30:02 2026
Format: 1.8
Date: Sun, 06 Sep 2026 01:58:14 +0800
Source: libxml2
Binary: libxml2-16 libxml2-16-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: alpha
Version: 2.15.4+dfsg-1
Distribution: sid
Urgency: high
Maintainer: alpha Build Daemon (alpha-sc-02) <alpha-sc-02@alpha-sc-02.buildd.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libxml2-16 - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1146744
Changes:
 libxml2 (2.15.4+dfsg-1) unstable; urgency=high
 .
   * New upstream bug fix release. Closes: #1146744.
     Security fixes:
     - CVE-2026-86137: xmlregexp: out-of-bounds read in the NXT macro
       (xmlFAParsePosCharGroup).
     - CVE-2026-86138: dict: integer overflow in xmlDictAddQString leading
       to a heap-based buffer overflow.
     - CVE-2026-86139: uri: integer overflow in xmlURIEscapeStr.
     - CVE-2026-86140: valid: stack-based buffer overflow through unchecked
       strcat in xmlSnprintfElements.
     - CVE-2026-86141: xmlregexp: NULL pointer dereference in
       xmlRegNewParserCtxt.
     - CVE-2026-86142: xpointer: heap-based buffer overflow in
       xmlXPtrEvalXPtrPart.
     - CVE-2026-86143: xmlIO: missing integer overflow check before calling
       the write callback.
     - CVE-2026-86144: xinclude: parse flags such as XML_PARSE_NONET were
       not propagated by xmlXIncludeProcess and xmlXIncludeProcessTree.
     - CVE-2026-11979: xmlcatalog: stack-based buffer overflows in --shell
       command handling.
   * d/control: bump Standards-Version to 4.7.4, no changes needed.
Checksums-Sha1:
 46e5081a8aeb04590f9753f5bfbbd8089eb28bea 1621128 libxml2-16-dbgsym_2.15.4+dfsg-1_alpha.deb
 5475198e996f75ecee49e55a607b20194bdfd3a8 615444 libxml2-16_2.15.4+dfsg-1_alpha.deb
 1183686477e4223878f54f28a189b1baa55dd847 810124 libxml2-dev_2.15.4+dfsg-1_alpha.deb
 ce1ade10d0ee84883f7656bf52d608c6bc98cd53 112416 libxml2-utils-dbgsym_2.15.4+dfsg-1_alpha.deb
 725f338ae51a0fade443a69d340edf987f69148a 122792 libxml2-utils_2.15.4+dfsg-1_alpha.deb
 becba7260fc14403bf8905f87163e4697f66fb3e 8683 libxml2_2.15.4+dfsg-1_alpha.buildinfo
 94dcfb4742d2e2aca6a5b4fcb7071e895dea09c1 219064 python3-libxml2-dbgsym_2.15.4+dfsg-1_alpha.deb
 0277aaf90c16ac97052b20fff3a0a58bb15ed06d 187128 python3-libxml2_2.15.4+dfsg-1_alpha.deb
Checksums-Sha256:
 8b028161a2ee0e7463e9b2c44b1f7305bd797716519b73fa0182a8bb6318fa8c 1621128 libxml2-16-dbgsym_2.15.4+dfsg-1_alpha.deb
 ef2eac35f92f71370f94444cef705e3148860b80cf503c9be608cd442b0ed61e 615444 libxml2-16_2.15.4+dfsg-1_alpha.deb
 48f2299e4de75f0f034674726cd8ccd394491ee47761eca99d753b8d6c2b4d4a 810124 libxml2-dev_2.15.4+dfsg-1_alpha.deb
 f08430f53c8e8513a1082dba2abbf58c1c4d8bee0ae10a771c8346d9d46dc715 112416 libxml2-utils-dbgsym_2.15.4+dfsg-1_alpha.deb
 e53651cc2dccd018ab25aa08dcd117872882551a9785837c1776f7ba72ba5750 122792 libxml2-utils_2.15.4+dfsg-1_alpha.deb
 640c391812a619a7fb394211bb719b8e1ae942d9ac821a09605444751f0cafe7 8683 libxml2_2.15.4+dfsg-1_alpha.buildinfo
 96f05c3bf6546fe91c93c7867f267097bcd79a00696e6a0706ce1a87c16fa693 219064 python3-libxml2-dbgsym_2.15.4+dfsg-1_alpha.deb
 9d8a9a837de35bb4f066e51afafc1c43f1fcd1b1e02dac3ae4bef5b0466ffa30 187128 python3-libxml2_2.15.4+dfsg-1_alpha.deb
Files:
 fa98634e2e98477d5305e17759af7b80 1621128 debug optional libxml2-16-dbgsym_2.15.4+dfsg-1_alpha.deb
 c8f7a9c8f03dfb6e4433e4546d9378cd 615444 libs optional libxml2-16_2.15.4+dfsg-1_alpha.deb
 26c457b021067cd85f54ddc5ec7009a4 810124 libdevel optional libxml2-dev_2.15.4+dfsg-1_alpha.deb
 b7e1df1b9d3dfcf655cf7d9994358896 112416 debug optional libxml2-utils-dbgsym_2.15.4+dfsg-1_alpha.deb
 9d9c8c096b0ea75925efd36a1519b4b1 122792 text optional libxml2-utils_2.15.4+dfsg-1_alpha.deb
 097adb2f6624cb4e721f39bacc6289a9 8683 libs optional libxml2_2.15.4+dfsg-1_alpha.buildinfo
 5fd09155143168cc6ecbee9318a6118c 219064 debug optional python3-libxml2-dbgsym_2.15.4+dfsg-1_alpha.deb
 0a0d2a75bf588a96a8c323ac035965ec 187128 python optional python3-libxml2_2.15.4+dfsg-1_alpha.deb
Signed-By: Debian buildd autosigning key for alpha-sc-02 <buildd_alpha-alpha-sc-02@buildd.debian.org>