[From nobody Sat Jun 27 16:05:07 2026 Received: (at 1136300-close) by bugs.debian.org; 27 Jun 2026 15:03:29 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 84; hammy, 150; neutral, 147; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:49594) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wdUZ7-00CnNA-1e for 1136300-close@bugs.debian.org; Sat, 27 Jun 2026 15:03:29 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wdUZ6-00Civj-0m for 1136300-close@bugs.debian.org; Sat, 27 Jun 2026 15:03:28 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=R2nh+ph5CckQ6ebFyaG59IH5VEMmkuLkZ5lUKTwWYdI=; b=Kfhvh6JHSesPOwpXiwZdGBPtXH B7L+QrsLO6y6Du2rqqvgxfi2W2iDOWCadPUKODxaaycIjdgMFDTo0rqvJgcJntSL5qVmkiVz1QrSJ sUvjhmntt0UVPtjB4YEC5TYDnLZ01KWNILoSV7AQd/OAyVuMZ2UQOgL4/eKy92CIwhkEWaNNQiku6 BSkgY3WkpBGxvIih4wuvLDqpjb0G1FZZDuYmIKwgiMTquq3mxKzI9Rw7afmsCcT7x7icy0CKONrmx NOxxnc59C5Gade7nl/y6JXB+QHMxN/QvlmaIwS+eaJKYZnPbdQrR5sR0zyPAZ2dAK39PRqKaRmo8l msZDxF1w==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wdUZ5-0000000DFuU-1LLK; Sat, 27 Jun 2026 15:03:27 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1136300-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: libxml-libxml-perl Debian: DAK Debian-Changes: libxml-libxml-perl_2.0207+dfsg+really+2.0134-1+deb12u1_sourceonly.changes Debian-Source: libxml-libxml-perl Debian-Version: 2.0207+dfsg+really+2.0134-1+deb12u1 Debian-Architecture: source Debian-Suite: oldstable-proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1136300: fixed in libxml-libxml-perl 2.0207+dfsg+really+2.0134-1+deb12u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============5130261322186902273==" Message-Id: <E1wdUZ5-0000000DFuU-1LLK@fasolo.debian.org> Date: Sat, 27 Jun 2026 15:03:27 +0000 --===============5130261322186902273== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libxml-libxml-perl Source-Version: 2.0207+dfsg+really+2.0134-1+deb12u1 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of libxml-libxml-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136300@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated libxml-libxml-p= erl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Jun 2026 13:41:54 +0200 Source: libxml-libxml-perl Architecture: source Version: 2.0207+dfsg+really+2.0134-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1136300 Changes: libxml-libxml-perl (2.0207+dfsg+really+2.0134-1+deb12u1) bookworm; urgency= =3Dmedium . * Team upload. * fix: replace domParseChar with xmlValidateName to prevent OOB UTF-8 read (CVE-2026-8177) (Closes: #1136300) Checksums-Sha1:=20 7743c043a4c29c3945f35c3b8b10d6e80d481eee 2614 libxml-libxml-perl_2.0207+dfsg= +really+2.0134-1+deb12u1.dsc 73d0f88dbc8b902d9a8e281f9ccf4c2a0ab9c064 14904 libxml-libxml-perl_2.0207+dfs= g+really+2.0134-1+deb12u1.debian.tar.xz Checksums-Sha256:=20 fde1e788ee67195b9a57128c1545c31e9bff5b75bd7819ec2bcf056eabb77345 2614 libxml= -libxml-perl_2.0207+dfsg+really+2.0134-1+deb12u1.dsc 4d70d0cacc92934be32ede6607b5a5a7c50d166269324e12c6bb26abe975692b 14904 libxm= l-libxml-perl_2.0207+dfsg+really+2.0134-1+deb12u1.debian.tar.xz Files:=20 5fca34b45da8ae5df39496fe282a330e 2614 perl optional libxml-libxml-perl_2.020= 7+dfsg+really+2.0134-1+deb12u1.dsc ab3aa5b24bd6cf8ad57cee65c8e5b3d6 14904 perl optional libxml-libxml-perl_2.02= 07+dfsg+really+2.0134-1+deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmo/yeVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EXTkP/15312EnfxBJoIRmACbY0UVGrIpS7Lwl QiBaFRtUyCusE553H2z5YUZRVgPfyfKu0mRmDSIsoIOaMHfAsb+WKHF8ckJ1JGn1 te2O9BidbKpwcRn5VlOt3UmfE6/DoS8fXWpNQ0cXjM3Tmfl3q3HMnF/kj1E4+leH WPaLPu+rttEle/LXZQQBaSy+bbMEYHpU+S9OBANdV+CG7E5OakOunDjmFuQOshgB am8iBdDdXsXiQgc0ejn/pvd5kX771CYakS9jx9Kn5xn7ut0tfUlqoOvuVwQJd7Ue UC8rXKM9BbidnuXQfyp2OruGPJ99Rvanu0x2TSR9c9eL1NBtmOHJICvE3e9D3Xwd hvx345cKh8oxXBSmzauWXQ52MaAEkhP7g0sgjslvsboBA8hklE/jFrCjY+fnoq5X t+WMNUTSi6J9fVpNr/RgNqjPRMdbTkfDoroLiAjSLPQZZMqh7IOHuCK9yc0himlR 7dj1quLr8Mb5RBtQ2jLQdV7cnSv5L/Zvya/mUbegbeW/cUAVm6ED0x1sGwh26X3x 6YnE0yaFxswhP8o7UkaVonafgK3etZfwkD2/eQ9noPoZ6mbSa4Q9Fi0hM0zWSuCO MN7GM+7/XwQ2REq6hFCRlU6cQhT0OJ1+E813tZBq2KMO2apwMMaxiRmqRkXB6Le7 Ns4GlCQZbKix =3DieRF -----END PGP SIGNATURE----- --===============5130261322186902273== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaj/mPwAKCRCb9qggYcy5 IZzQAQDRXlyf/JxY1ltHEbuA4XMXGA03tKzyC32z6NhmukSa6wEA+sGxDxC486sM QooeS2lZlYAmPpQNQ0NGVhKNSXYpwAg= =rZkX -----END PGP SIGNATURE----- --===============5130261322186902273==-- ]