From foo@bar  Sun Sep  6 20:50:02 2026
Format: 1.8
Date: Sun, 06 Sep 2026 01:58:14 +0800
Source: libxml2
Binary: libxml2-16 libxml2-16-dbgsym libxml2-dev libxml2-utils libxml2-utils-dbgsym python3-libxml2 python3-libxml2-dbgsym
Architecture: powerpc
Version: 2.15.4+dfsg-1
Distribution: sid
Urgency: high
Maintainer: ppc64 / powerpc Build Daemon (debian-project-be-1) <debian-project-be-1@debian-project-be-1.buildd.org>
Changed-By: Aron Xu <aron@debian.org>
Description:
 libxml2-16 - GNOME XML library
 libxml2-dev - GNOME XML library - development files
 libxml2-utils - GNOME XML library - utilities
 python3-libxml2 - GNOME XML library - Python3 bindings
Closes: 1146744
Changes:
 libxml2 (2.15.4+dfsg-1) unstable; urgency=high
 .
   * New upstream bug fix release. Closes: #1146744.
     Security fixes:
     - CVE-2026-86137: xmlregexp: out-of-bounds read in the NXT macro
       (xmlFAParsePosCharGroup).
     - CVE-2026-86138: dict: integer overflow in xmlDictAddQString leading
       to a heap-based buffer overflow.
     - CVE-2026-86139: uri: integer overflow in xmlURIEscapeStr.
     - CVE-2026-86140: valid: stack-based buffer overflow through unchecked
       strcat in xmlSnprintfElements.
     - CVE-2026-86141: xmlregexp: NULL pointer dereference in
       xmlRegNewParserCtxt.
     - CVE-2026-86142: xpointer: heap-based buffer overflow in
       xmlXPtrEvalXPtrPart.
     - CVE-2026-86143: xmlIO: missing integer overflow check before calling
       the write callback.
     - CVE-2026-86144: xinclude: parse flags such as XML_PARSE_NONET were
       not propagated by xmlXIncludeProcess and xmlXIncludeProcessTree.
     - CVE-2026-11979: xmlcatalog: stack-based buffer overflows in --shell
       command handling.
   * d/control: bump Standards-Version to 4.7.4, no changes needed.
Checksums-Sha1:
 64653cda908c1f9bea7a1fb1372fde29dff04281 1772580 libxml2-16-dbgsym_2.15.4+dfsg-1_powerpc.deb
 eaef8724e14c63219f1009ffe33f24e0624c57c2 643576 libxml2-16_2.15.4+dfsg-1_powerpc.deb
 d1c0b5d150ee15f5aaceddddaa2e415d0c1e6d47 745408 libxml2-dev_2.15.4+dfsg-1_powerpc.deb
 d5480656140cc2f624c4dc7bddb946e16ac01f47 115056 libxml2-utils-dbgsym_2.15.4+dfsg-1_powerpc.deb
 b2ed4ebc590d358571a007b9e599801679abfcbf 124212 libxml2-utils_2.15.4+dfsg-1_powerpc.deb
 0bab7d70b57f3286bf0bd39096c995e5524a90b2 8729 libxml2_2.15.4+dfsg-1_powerpc.buildinfo
 c71a77cc462f07fac1050f219635854fa5f4bc8b 233240 python3-libxml2-dbgsym_2.15.4+dfsg-1_powerpc.deb
 0e8981544930e8bc1027ded8ea49c6e6a5280d9e 189208 python3-libxml2_2.15.4+dfsg-1_powerpc.deb
Checksums-Sha256:
 dfd8b1419b3d6faf740316f67a6dfd19b4ac0cc1946ad6cd6d40e50c2deb26fc 1772580 libxml2-16-dbgsym_2.15.4+dfsg-1_powerpc.deb
 59f9b14db753e3547d799e6b8678afabf21bc2cbcbc26d331a479b8543316d21 643576 libxml2-16_2.15.4+dfsg-1_powerpc.deb
 b10d8c0bf787fee87ebb1e84dd2fb2dbc58c68b0d65a1e66a3ac7ba85bda5362 745408 libxml2-dev_2.15.4+dfsg-1_powerpc.deb
 72f4eb336eb67b95ba6b6692a41f350e9a8bce778956d7e1ff9428edd79dd0fd 115056 libxml2-utils-dbgsym_2.15.4+dfsg-1_powerpc.deb
 4e0a71d6905381231d6b99274c359e3c967401237640f4eb5d65f7ba361d2067 124212 libxml2-utils_2.15.4+dfsg-1_powerpc.deb
 70d1edc55c83f79db178ec0b11538f2d0119f12cf63b5ad874d33a4bcbb53267 8729 libxml2_2.15.4+dfsg-1_powerpc.buildinfo
 74750271aca504a607a96d58094618635378a6c00c82e9da9dce12d1863d8490 233240 python3-libxml2-dbgsym_2.15.4+dfsg-1_powerpc.deb
 b06c190eeb4652ff2ba5d031f7f849002edd7a84f1cfd623563fb19fcc65377f 189208 python3-libxml2_2.15.4+dfsg-1_powerpc.deb
Files:
 a8979ffc405d77244e1100fcc8488514 1772580 debug optional libxml2-16-dbgsym_2.15.4+dfsg-1_powerpc.deb
 1cb424732d805ec5b8c5adbd976edbac 643576 libs optional libxml2-16_2.15.4+dfsg-1_powerpc.deb
 5327df8c2320862a16e494da01fecb20 745408 libdevel optional libxml2-dev_2.15.4+dfsg-1_powerpc.deb
 b2d41deca9bfeae278f528e79adc00ed 115056 debug optional libxml2-utils-dbgsym_2.15.4+dfsg-1_powerpc.deb
 2ef43df2644079ed417bc76df3a7738a 124212 text optional libxml2-utils_2.15.4+dfsg-1_powerpc.deb
 3c5d6c1e7b0ceec94bfeb999d8906dbd 8729 libs optional libxml2_2.15.4+dfsg-1_powerpc.buildinfo
 8221db134061f3c923334acedd759bdf 233240 debug optional python3-libxml2-dbgsym_2.15.4+dfsg-1_powerpc.deb
 a1e5bf7be12914853c91aa47bd22305f 189208 python optional python3-libxml2_2.15.4+dfsg-1_powerpc.deb
Signed-By: Debian buildd autosigning key for debian-project-be-1 <buildd_ppc64-debian-project-be-1@buildd.debian.org>