[From nobody Mon May 25 05:35:07 2026 Received: (at 1136300-close) by bugs.debian.org; 25 May 2026 04:33:49 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 86; hammy, 150; neutral, 132; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:59886) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wRN0e-00481A-1R for 1136300-close@bugs.debian.org; Mon, 25 May 2026 04:33:48 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wRN0c-001jnA-1z for 1136300-close@bugs.debian.org; Mon, 25 May 2026 04:33:46 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=/Jl3wWMA9i8oewc8SDeMoL/+k2lFsvgi6Zl0JSF9ucs=; b=fjxklq+w4fAJxy7FUZJ24A+UwX WH4l9eM1FqQ4wBaO7UOl+Ib1lKe5vBBqRZaDwkYz0wmG3Lerj4MlTBd6KXYjmcs445fOR+Vr6F6Yq DaKKUcwkzLmQVHRfLcRZ2YPyvweUv0j2kQag+aQe1Kx7uoLMbBGk9CjzXKYb/dUctX0Z07jdO2KNA Rxfk4pzy4jtJayUNW/x72G6pFyNgfPVMEjANRDMnJRVA+LEkaG2aCBGdR4o+gqUqcD4E5qZzfDvHm gXJECi06sncgOSNRlX4/ApqmPDElrSGb0eZPwZavVtXfpkpmr13NSMNO/o5JOGwNBp+MubL6xLMTq uoaq1U8w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wRN0a-00000001mBJ-3iy7; Mon, 25 May 2026 04:33:44 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1136300-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libxml-libxml-perl Debian: DAK Debian-Changes: libxml-libxml-perl_2.0207+dfsg+really+2.0134-8_sourceonly.changes Debian-Source: libxml-libxml-perl Debian-Version: 2.0207+dfsg+really+2.0134-8 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1136300: fixed in libxml-libxml-perl 2.0207+dfsg+really+2.0134-8 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5868219582776642493==" Message-Id: <E1wRN0a-00000001mBJ-3iy7@fasolo.debian.org> Date: Mon, 25 May 2026 04:33:44 +0000 --===============5868219582776642493== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libxml-libxml-perl Source-Version: 2.0207+dfsg+really+2.0134-8 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of libxml-libxml-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136300@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated libxml-libxml-p= erl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 24 May 2026 21:22:59 +0200 Source: libxml-libxml-perl Architecture: source Version: 2.0207+dfsg+really+2.0134-8 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1136300 Changes: libxml-libxml-perl (2.0207+dfsg+really+2.0134-8) unstable; urgency=3Dmedium . * Team upload. * fix: replace domParseChar with xmlValidateName to prevent OOB UTF-8 read (CVE-2026-8177) (Closes: #1136300) Checksums-Sha1:=20 fb04cdeb8d88d203e201cbbe8f05162d79cd44cf 2579 libxml-libxml-perl_2.0207+dfsg= +really+2.0134-8.dsc 3b9686743977a64ba98705f2eec51bcdf6a4ef01 18780 libxml-libxml-perl_2.0207+dfs= g+really+2.0134-8.debian.tar.xz Checksums-Sha256:=20 62a57686989563eb8e0cd2a869354901aefb0b1699ae9c6179e2de8f2ec35bbe 2579 libxml= -libxml-perl_2.0207+dfsg+really+2.0134-8.dsc ae01161f82f1f7819c8b1a0e823d4c7888cc579241d0481d8ac2cbe4f5c1e5cf 18780 libxm= l-libxml-perl_2.0207+dfsg+really+2.0134-8.debian.tar.xz Files:=20 b10e32c9455d823cce6c57a711573347 2579 perl optional libxml-libxml-perl_2.020= 7+dfsg+really+2.0134-8.dsc 82e4e3b0934aac8f25249d7729cfc5b7 18780 perl optional libxml-libxml-perl_2.02= 07+dfsg+really+2.0134-8.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmoTzrJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Eaq4P/0NVFis7DtTXO6gpYexhlbVQVlnaGiTY 7HY5T0IJ5MBHQ8uXFWG/jyk+fFsSPEZVcHWxVXVmF9s2kXh58r03BQOEvfzy3ybC 3GBqc1bSriUw94mFqVjgoooxYKfaE8cmA6cVYUrv77KVwbvccGmP/5pFfjeS+hBR AtQvECR9wdyw9O2Y/OTWoXY4LXrsvzuVP8+J1iPV5nSdGFaDFjKypJu4mQv/bbwQ P9Q8GptsFrE5l5mizdzF0GUA8r6kdg5Yauk+D0BiU1vVDsWQ4pMTxcauomw209wt tsMhbm6KgHdjPxBxBTizrXX5oFjy0m69CHH/hh/jB0v3Oo5dV8hmhZW8w8fXZIWM w8ObvtCPofJuNyIHdV1iqs6/zI2fogoSU4bUzjVqiXR4EMKtgpp3GE099ToTKkeY 5R+x7uzM19lnLg0EBOeBlLRR/iERQ3jCTuWNBvxlyUZKkfAU9zCs1Ve5LTRO0FI4 39w9oDWHuHTshv1Vfta7DI5eJ8i/vu0u39wdUXb3IvUyN1ZZ1Qzp3COvJjxKT5wk u7g/iQ4S2fbH3ltNl1TbL3vTi4BDWnVm2fKJGDY5yPyPCGaISs1bVxrxMCp8Ez29 xWTT41w1TeX2Gu1jYOULI9YLHELGQeDGehyyrLRkOJ8XxiMx5mPSa+Fauwr+F3Vx gg4z7nvTgLHa =3Dtyxi -----END PGP SIGNATURE----- --===============5868219582776642493== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCahPRKAAKCRCb9qggYcy5 IdKnAP9Nm3UunvmYAwg2InrZw6KC1SKPVi9bgTC3HOT7rJJ20gEAs0LpPojEf0ht AmZmM0Vd1fRM32GBRioZoTv7Qq4J4g4= =StI0 -----END PGP SIGNATURE----- --===============5868219582776642493==-- ]