[From nobody Sat Mar 21 09:21:08 2026 Received: (at 378412-close) by bugs.debian.org; 21 Mar 2026 09:18:55 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_NONE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 101; hammy, 150; neutral, 130; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:53380) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w3sTv-0071Xt-0L for 378412-close@bugs.debian.org; Sat, 21 Mar 2026 09:18:55 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w3sTt-009Rmx-2c for 378412-close@bugs.debian.org; Sat, 21 Mar 2026 09:18:53 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=SF4pDibWNJhI3e8QCKFcHGuhwpN4AIxoRxl2HDoFys0=; b=PRIw3FediAyJ6DG3v1PTIB+htA 4mjuqNKZgXO/OiPzk1BJwdt3vOii5B8CSG+dw88saZ5z2MRvSVDZn6F+DtzYCJe4n1rW7g3UfWZ3y pG5IxMIlCOscR9ZeCtjfKgbmK44RVAnhGqb4GQpvzsdJ7N2LWBnhEVD15Q2JY+8GB0rl0qU4/Gb6p tWykXOrawMm1e3cBV/RFDGCtTFE3fdsjPhMr96Z/KanjB9vtLmeAzkCIjePhijmdSXY0LTLEnxlZQ aPxpOW6Fyau7+luiQLhlRVMtMxQWhXfSCbpXsdv+KBxfbaLCYdPPkuqY0WNaggJj/dnAa/wp9c/jc fYWRuLcg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w3sTs-00000002L5N-3og8; Sat, 21 Mar 2026 09:18:52 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 378412-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libxml-parser-perl Debian: DAK Debian-Changes: libxml-parser-perl_2.47-2_sourceonly.changes Debian-Source: libxml-parser-perl Debian-Version: 2.47-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#378412: fixed in libxml-parser-perl 2.47-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============6035407419630040817==" Message-Id: <E1w3sTs-00000002L5N-3og8@fasolo.debian.org> Date: Sat, 21 Mar 2026 09:18:52 +0000 --===============6035407419630040817== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libxml-parser-perl Source-Version: 2.47-2 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of libxml-parser-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 378412@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated libxml-parser-p= erl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 21 Mar 2026 07:34:12 +0100 Source: libxml-parser-perl Architecture: source Version: 2.47-2 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 378412 Changes: libxml-parser-perl (2.47-2) unstable; urgency=3Dmedium . * Team upload. * Fix buffer overflow in parse_stream when filehandle has :utf8 layer. This improves the fix for CVE-2006-10002. * fix: off-by-one heap buffer overflow in st_serial_stack growth check (CVE-2006-10003) (Closes: #378412) Checksums-Sha1:=20 0e2bb1d00c47d4dea6ce4ba63d0a491f99325c4d 2360 libxml-parser-perl_2.47-2.dsc b75f80305ccc0b566253fa452f37f01fa955d7f3 61112 libxml-parser-perl_2.47-2.deb= ian.tar.xz Checksums-Sha256:=20 639ba59de9cc7ced282859e29a2ce55b06b7694e00e2dc2632499be56cca50f2 2360 libxml= -parser-perl_2.47-2.dsc 5dab3a3ac4f29e5d9a811c0f44aec2853f6746cc466de0601c3a06b3a810f7f6 61112 libxm= l-parser-perl_2.47-2.debian.tar.xz Files:=20 e31cac64fd714be9231d3284e42fc052 2360 perl optional libxml-parser-perl_2.47-= 2.dsc 0ed718efe672d55558cdc036741aa377 61112 perl optional libxml-parser-perl_2.47= -2.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmm+XP9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ErZcP/iiLsfLfcJpEhYbUo+MwBm51kR/pdfI+ DlSrHCkM6P2YGnITMMA8/jHE/OdRFTpJV3Ei293nszfa3lTkZgyUAfADbcrUpUcD ntQnNDgdd8b/3c+KlHcByyI7iCcukFqZllN5PpYrMjABLY2nUYLkeWzHywP+oWrW DDkC7KNWb6ifI/eTW2kXafA1Bd1TLNJijvKMn/nv0QZdbwI0euyCjN8WpguyXd7e af2Hajb039l/gfI07VwbTsAkf6wq71F/MdsmMIDkbga5m8MNUfCKLpbfK48FFOZb Pqo1iLl/6izEaRBWra0x/TUf79nyfWHOfLAkuhwPRdETqdxRmbXYDdLqA01EWmzV xoJ04esxQspJdglR52i3UEMQd5VxjJmIerAOUS/FnFyZEJTnpyM136zjMmdN/1aR gEwg/JYJPT450JyIrtY+TCsIacqKgoH/9CoEtz0eTKVFmVtmYNi68lRvtDiel8eV 9f+ljDBAKPXCV8qPF8Ui+QKONtaLXsPp5XT688+ux0keS0yCJ0svckGdcYoVYdGz hJpjDIWQDHXxmKUxOUN/E9hvvzsooKpJcCq2lSza7XA0S/H7iOw2mUq74PZN0Wll lQ0oDvNT5cDsanZUviLnArtadpFEMUilGR69+nK+vJhAzQyl6kA06rDQKo9PbvmA 7K5utHELKKdh =3DLrVT -----END PGP SIGNATURE----- --===============6035407419630040817== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCab5ifAAKCRCb9qggYcy5 IR0FAQCfx3PssLmoNwJOO1T6SP1tY/VSGqt2ld6mnhDO5S17YgEAknTsQttEXkYg vLLtiGY3g2v4HDlyoCfCRwU+FKGf+gs= =wLvf -----END PGP SIGNATURE----- --===============6035407419630040817==-- ]