-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 Aug 2025 19:12:53 +0800 Source: libxslt Architecture: source Version: 1.1.35-1.2+deb13u1 Distribution: trixie-security Urgency: medium Maintainer: Debian XML/SGML Group Changed-By: Aron Xu Closes: 1108074 1109123 Changes: libxslt (1.1.35-1.2+deb13u1) trixie-security; urgency=medium . * Fix information disclosure with improved memory handling of generated-id() (Closes: #1108074, CVE-2023-40403) * Fix type confusion in xmlNode.psvi between stylesheet and source nodes (Closes: #1109123, CVE-2025-7424) Checksums-Sha1: 0350297ddafb6505b47f2d3af3222c41d155a2cf 1850 libxslt_1.1.35-1.2+deb13u1.dsc 9e4e7f884f8ac88c17df0f9475201bef985d42e4 1827548 libxslt_1.1.35.orig.tar.xz 08216f4bbf04584ffe850e69a3d705bc431fdb8b 30456 libxslt_1.1.35-1.2+deb13u1.debian.tar.xz 5510688948e97b8f8647f8370cc72eb934f1d11a 5452 libxslt_1.1.35-1.2+deb13u1_source.buildinfo Checksums-Sha256: d5de86c66c7833442d0c06881dac36c02063c12122bf0bbb3b671df95001e52f 1850 libxslt_1.1.35-1.2+deb13u1.dsc 8247f33e9a872c6ac859aa45018bc4c4d00b97e2feac9eebc10c93ce1f34dd79 1827548 libxslt_1.1.35.orig.tar.xz b55ef92c63959181f6a9772c506de589d27ea0baeff7967f456055db4a3e37de 30456 libxslt_1.1.35-1.2+deb13u1.debian.tar.xz 2456f6471d17acd0fa4831b8b8db8fa783f29593d90004816171c1338b7dda6f 5452 libxslt_1.1.35-1.2+deb13u1_source.buildinfo Files: 709524624c720903002bcee1d855f0b7 1850 text optional libxslt_1.1.35-1.2+deb13u1.dsc 5b3a634b77effd8a6268c21173575053 1827548 text optional libxslt_1.1.35.orig.tar.xz f761d7562c6439902a6befa6f21da6af 30456 text optional libxslt_1.1.35-1.2+deb13u1.debian.tar.xz fe95c865a42fc38c39ab477ed5cc4f2e 5452 text optional libxslt_1.1.35-1.2+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEBLHAyuu1xqoC2aJ5NP8o68vMTMgFAmiiERgACgkQNP8o68vM TMhndQgAkZaKGW4LF+rU8mIkV7xFIy6s7lWM/bolc+/WF6BYrHa0I4pE75wjVITc /R4QHYeunH7TiR/euP/nhFT1O++jBqQvyLdOkr73CxHZbcen8jkNBCrOhZWXeOAd iG94SPhxCz8tdFHovBczVhtjDU1VuQE0BiEm69EzHVczAHiR4O4Gg5vfVC0CaHcB P7ZkapVX0u0EzvMcD3HvAYzQK/Ii0BjaRmQhNkwJcbE1Qoz/YYtxBg291+dQogfi K4DnsXgun1+xiE1pI1678kXXHXXTUoGV8MiZAuts6xalECYqLuelQ3Qhqs7G9vX/ zlCYZyf59wpNenkRc8ocSRSigpj4mA== =nVZO -----END PGP SIGNATURE-----