[From nobody Thu Apr 2 18:19:08 2026 Received: (at 378412-close) by bugs.debian.org; 2 Apr 2026 17:18:16 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 73; hammy, 150; neutral, 153; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:51996) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LgO-007k0S-0w for 378412-close@bugs.debian.org; Thu, 02 Apr 2026 17:18:16 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LgO-008MwS-0g for 378412-close@bugs.debian.org; Thu, 02 Apr 2026 17:18:16 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=i48rk+hFttA9K/W9ubykQDLKtw2aRwBOMrNZzcbHTLQ=; b=k1xRnNIe5ig/O6EQ2GHsLLDAnq kgAJQNWnG4kaWzuorCeff9OxEd0ybPHJVHpQ8Vzs8pbTdnO0nshOSj8FEQhFWFv/x8Ol7woM4khJ8 T7Mc2HCNWInCjULNFmRe49E3tNOs9O/yBonR2dfbj1t6SA16IzqbksinZA4WB90pkf9vuMP0kch4X 1Fv3qf7bH6BY0fuUBQEU3fOcc59NfU41wHWTg/wp90m4Y2eWogdJV4VMDBSpZuZ/0+Zjuv0R81un2 2QbaZ/wG0TtqBSrCZv++socCxQp6e1AzoAOAHrJU9BhOXTooBVG50KDM+8rWMlLxoPoNFru1D3MRV 7jAPbSBA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LgN-00000001SwZ-1iRH; Thu, 02 Apr 2026 17:18:15 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 378412-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: libxml-parser-perl Debian: DAK Debian-Changes: libxml-parser-perl_2.47-2~deb13u1_sourceonly.changes Debian-Source: libxml-parser-perl Debian-Version: 2.47-2~deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#378412: fixed in libxml-parser-perl 2.47-2~deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8283932064232647481==" Message-Id: <E1w8LgN-00000001SwZ-1iRH@fasolo.debian.org> Date: Thu, 02 Apr 2026 17:18:15 +0000 --===============8283932064232647481== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libxml-parser-perl Source-Version: 2.47-2~deb13u1 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of libxml-parser-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 378412@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated libxml-parser-p= erl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 21 Mar 2026 22:00:43 +0100 Source: libxml-parser-perl Architecture: source Version: 2.47-2~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 378412 Changes: libxml-parser-perl (2.47-2~deb13u1) trixie-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * Rebuild for trixie-security . libxml-parser-perl (2.47-2) unstable; urgency=3Dmedium . * Team upload. * Fix buffer overflow in parse_stream when filehandle has :utf8 layer. This improves the fix for CVE-2006-10002. * fix: off-by-one heap buffer overflow in st_serial_stack growth check (CVE-2006-10003) (Closes: #378412) Checksums-Sha1:=20 a7dd9fa321b32eae6a7eb485eefa6f006714e814 2392 libxml-parser-perl_2.47-2~deb1= 3u1.dsc caa4cc51930cc6bd14c1d5bb1dbf5aeae4ab952b 279029 libxml-parser-perl_2.47.orig= .tar.gz 6da66928d1208ec82dabf3fb6a5fb08db2afbd1a 60524 libxml-parser-perl_2.47-2~deb= 13u1.debian.tar.xz Checksums-Sha256:=20 c3d84997e6dd2b1a6d0ad5c7ac6d5bd86a8779797e0f574011617ab0d6d77008 2392 libxml= -parser-perl_2.47-2~deb13u1.dsc ad4aae643ec784f489b956abe952432871a622d4e2b5c619e8855accbfc4d1d8 279029 libx= ml-parser-perl_2.47.orig.tar.gz ec8cdd8315837313e96d41b787b2f7586f25935d17f741a4e521a85f9f7454eb 60524 libxm= l-parser-perl_2.47-2~deb13u1.debian.tar.xz Files:=20 a111fe09501566b1fc9c9c0859b2643f 2392 perl optional libxml-parser-perl_2.47-= 2~deb13u1.dsc 89a8e82cfd2ad948b349c0a69c494463 279029 perl optional libxml-parser-perl_2.4= 7.orig.tar.gz 01619e5cd4ce5cd828829c4868a559cb 60524 perl optional libxml-parser-perl_2.47= -2~deb13u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmnAQ1xfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EpYIP/jAvlzC7qyr05rNZkQLFvnOzQo6v+vyQ WCMy0o3GmSw/fI2JHcSfUDQYfMk8E0eDsadFA8Hhk73pybeOoRHRO4SXmj7PM0p1 yu0gc+GTgKJhh9tOAD4apzdqTtTr4NYLQ8nO1hv+0HTPPfboevAKWaBnQSifSbBD dtJAocsa0UFbv9InmYrr3rleWawe8Y8xUk1HU//U/06aArrVBeGZ6g4bc1174Olf kN2/ztCvUWrl5wv7H47rYJ3mqGi3A3zt5fv6cS/jYrZYK5lLkb8Y4iwnXhT8UqiG Z6FjfIpUAd1JRcjsDjvBv4zGEftms9SV6W9f2CdXDTnY9F2Q+YpJ5S7B3D6pA74L JeHA/sztcJr6iAkZuqS7MQaaK8K9tf1vOdy8b0I1wrZXNnFZuDXZaaO3QwEELtKa KjH3woJorVeSyA9Ssnxc940AiWIOq/JlTqT2a5zGipp8HzKk49wlKreRzDjX5wtd QBERiFl9FbnciwzHFUL9RRdNnDwtauEvHNbmN4OcWrAznlf/s7594VFsuZFLe+I7 OZr5fHtPoKLSu92sateK3B4WWGc0kQ/jfJa4QC1I0VVgClSVSTy55jIrs2MUc0kt Go5ukkrEcI1hqkSNLsmu0j/uqAl0wY9u0YWui62SGFQVxznxFuXNCw64GpXwxaUw wxbs3dfLhyNz =3DEACP -----END PGP SIGNATURE----- --===============8283932064232647481== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCac6k1wAKCRCb9qggYcy5 IXZbAP9oYW5mvWvrLEC7v8SyBJ93n6yENzO3rYk7CsSoH0fgTwEAqk3BeYxKB+Ui 2UbV4tN9omdbQNGby+pAxhZ5h39D4AI= =DmfS -----END PGP SIGNATURE----- --===============8283932064232647481==-- ]