[From nobody Thu Apr 2 17:49:07 2026 Received: (at 378412-close) by bugs.debian.org; 2 Apr 2026 16:47:50 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_NONE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 96; hammy, 150; neutral, 155; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:39290) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LCw-007gQA-2g for 378412-close@bugs.debian.org; Thu, 02 Apr 2026 16:47:50 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LCv-00AAul-1e for 378412-close@bugs.debian.org; Thu, 02 Apr 2026 16:47:49 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=l/RGuNll/feBmkeER2D/pG4x6kJgcRlO5tX0cQ9jSTQ=; b=nkAJVsekCvmqzeHX7AqAYE1Mhl uDIk5oH7+CV0z9juzPwM0fnqYzoka3BaniQACtREEZprTwn6ii8kc0JXKTAoGKxlG3gTa36s/QdQT GA49VMY1f34UeDlpKj2YQZFcZUBacpuf4nWfHNve+0th9mN93aI1mp6PTcRt74BR34nnCdOwAwki2 j7Dc5Hs6LgpxH6oF+9UKB/r1n4WOxgVCughm0r7e4/4XYJTI+BcotFYFGzifWAoGn91avEROI94oZ 2wmU7h4QgIdWV8vMZ7jHiqMEJNSF2llNnY39LXMV7sgfHnATSecg+vqVpFPNj1d+Ri/H5fZZ8RONi CdS70u2A==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w8LCu-00000001Oyj-2T4u; Thu, 02 Apr 2026 16:47:48 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 378412-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: libxml-parser-perl Debian: DAK Debian-Changes: libxml-parser-perl_2.46-4+deb12u1_sourceonly.changes Debian-Source: libxml-parser-perl Debian-Version: 2.46-4+deb12u1 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#378412: fixed in libxml-parser-perl 2.46-4+deb12u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8764177030560002167==" Message-Id: <E1w8LCu-00000001Oyj-2T4u@fasolo.debian.org> Date: Thu, 02 Apr 2026 16:47:48 +0000 --===============8764177030560002167== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libxml-parser-perl Source-Version: 2.46-4+deb12u1 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of libxml-parser-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 378412@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated libxml-parser-p= erl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 21 Mar 2026 22:06:33 +0100 Source: libxml-parser-perl Architecture: source Version: 2.46-4+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 378412 Changes: libxml-parser-perl (2.46-4+deb12u1) bookworm-security; urgency=3Dhigh . * Non-maintainer upload by the Security Team. * Fix buffer overflow in parse_stream when filehandle has :utf8 layer. This improves the fix for CVE-2006-10002. * fix: off-by-one heap buffer overflow in st_serial_stack growth check (CVE-2006-10003) (Closes: #378412) Checksums-Sha1:=20 168b959cd9b8939bf1e408f23e53fd26594c4fbf 2382 libxml-parser-perl_2.46-4+deb1= 2u1.dsc 40cba8a10847b71804684e5c72a410277f47f8ce 254763 libxml-parser-perl_2.46.orig= .tar.gz 56c722036e7e968582a66a4079f0465dbffe887f 61004 libxml-parser-perl_2.46-4+deb= 12u1.debian.tar.xz Checksums-Sha256:=20 57629ce422273a0599a5b9b8d6e935062613729582f994c954382b043ba180e9 2382 libxml= -parser-perl_2.46-4+deb12u1.dsc d331332491c51cccfb4cb94ffc44f9cd73378e618498d4a37df9e043661c515d 254763 libx= ml-parser-perl_2.46.orig.tar.gz 40c06250d15155d112483bc464ebc676092f196aa2deb67124a534c7294b6bee 61004 libxm= l-parser-perl_2.46-4+deb12u1.debian.tar.xz Files:=20 335720fc5544f2e4dd3684ccf42a33da 2382 perl optional libxml-parser-perl_2.46-= 4+deb12u1.dsc 80bb18a8e6240fcf7ec2f7b57601c170 254763 perl optional libxml-parser-perl_2.4= 6.orig.tar.gz 49a1f32c8d59bf4deea4132dda720a86 61004 perl optional libxml-parser-perl_2.46= -4+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmnAQ4VfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EcJkP+QE2BmO80Rlnru88Rea0Ic9v3ikgIZGh B9NbuTOOaQUMCfHWLCSU6TTnAUFJlcwGIxkCPVLuqjPmr4xEEuNTFv1fDLK3dO5X TOpapQfZuFfipRS/IWSiV66AU/E0TMxZ2+VvLsrVSuJubUIO3KMNwxB0JlTvmOKz Tf5XPCWeF+JthSGLTYs1auKsuPrp+0oyJFxy/ZTJH8hXNdcV1m0lv/85lxawAUcr FsAsFonRKedHxFd86hMnTUa+CjQRGS6uCMbRXHZa2WrhihVW7420g0pmchUb36nt I7fBi5ON91ReEzHQ//u8hvyh4X21bV5MB+KR5D27H9S4lAM1qsKsVd/+ZipQr1RY EtEyfHScnuBbq0V2/iq7A7fti4nNLGgOx/46PkuDV7BI9pp9hT5BHhyPO31lvbl+ vb6KW02/uBirucN5LBeAyNwBEkr6eS+Y8FAd/rivLcTL0wSORnvpicfvjlcgo2kK 30i2f3YX6ZYOF2PWaaJ3P4H/9cRwyLlhEXFDDR4RQ36YJXupn9ixd8cp8z0CRMT+ n61sO25dbYNHjN+arBF+M1Gb5EwX1e1bG3ghk3ZmyCrFiYXZa+SvdNnIp7gwpgwM 1YoVtNqzPZowEzQ8smEuyTgjTcBLL9Wr0zYaCObzxj+RJz/zbf4Iu+p4kB6orWB4 +rhp/czBe6xb =3DxWyk -----END PGP SIGNATURE----- --===============8764177030560002167== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCac6dtAAKCRCb9qggYcy5 IeaRAQCMe4k0ndO7MWsg8/pGdpbuwIQ5iapWYhpTAh7JuDvjsgEA44PPgV74s2QY xSlEdHFVsmbmVvvk01r6xgkfRmMf8Q0= =4G2v -----END PGP SIGNATURE----- --===============8764177030560002167==-- ]