XPost: linux.debian.devel.release

Control: tags -1 confirmed moreinfo

Hi,

On Thu, Jul 17, 2025 at 11:56:14PM +0200, Aron Xu wrote:

I would like to apply two patches for libxml2 fixing 3 CVEs:
- CVE-2025-6021: integer overflow in xmlBuildQName() (Closes: #1107720)
- CVE-2025-{49794,49796}: use after free and type confusion in xmlSchematronReportOutput() (Closes: #1107755)

Please go ahead with the upload and remove the moreinfo tag from this unblock request once the new upload has been in unstable for a few days, and you think it's ready to migrate.

Thanks,

Ivo

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)