[From nobody Sat Jun 27 16:05:06 2026 Received: (at 1136300-close) by bugs.debian.org; 27 Jun 2026 15:03:14 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 73; hammy, 150; neutral, 147; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:49518) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wdUYs-00CnMV-27 for 1136300-close@bugs.debian.org; Sat, 27 Jun 2026 15:03:14 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wdUYr-00Cism-1B for 1136300-close@bugs.debian.org; Sat, 27 Jun 2026 15:03:13 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=GgP/XapGz9E0ZL9jgJlneHD8XLPJD2m3rE5E9iho8yg=; b=r2YuNCxGqrpfeo3iGNghKlrM5k hI5xLv3ZQN5ad6s3TbN4W64DtMhjxYsA1sygZSOeYEy7lef/myxol1/ic6S0exVJ93x0RWkoQNqUA igMIzzXtR6ZVj/Etj6lq7O9U8lD9torT/tey60UWLRFCdh1+wmWq5fUlP3HmEuIfo8pT6u8NJPeUm CVuJs7i1nwFIoOrg6piHXqvJLQeMiN5cwsiFLVCvloJY+rvPV2XhsthjTmeKyXRMqFCRLN7skqIOK ye3PC5PrGxAugmpEMsKrzskoKb6y/7hnl5ZK5+FryabU4n73YiU74sM596LGiHJlDCkWPE0KTvFbL DYBAxMoQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wdUYq-0000000DFoU-1tlT; Sat, 27 Jun 2026 15:03:12 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Salvatore Bonaccorso <carnil@debian.org> To: 1136300-close@bugs.debian.org X-DAK: dak process-policy X-Debian: DAK X-Debian-Package: libxml-libxml-perl Debian: DAK Debian-Changes: libxml-libxml-perl_2.0207+dfsg+really+2.0134-5+deb13u1_sourceonly.changes Debian-Source: libxml-libxml-perl Debian-Version: 2.0207+dfsg+really+2.0134-5+deb13u1 Debian-Architecture: source Debian-Suite: proposed-updates Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1136300: fixed in libxml-libxml-perl 2.0207+dfsg+really+2.0134-5+deb13u1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============0533656355333895988==" Message-Id: <E1wdUYq-0000000DFoU-1tlT@fasolo.debian.org> Date: Sat, 27 Jun 2026 15:03:12 +0000 --===============0533656355333895988== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libxml-libxml-perl Source-Version: 2.0207+dfsg+really+2.0134-5+deb13u1 Done: Salvatore Bonaccorso <carnil@debian.org> We believe that the bug you reported is fixed in the latest version of libxml-libxml-perl, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136300@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Salvatore Bonaccorso <carnil@debian.org> (supplier of updated libxml-libxml-p= erl package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 27 Jun 2026 11:54:31 +0200 Source: libxml-libxml-perl Architecture: source Version: 2.0207+dfsg+really+2.0134-5+deb13u1 Distribution: trixie Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1136300 Changes: libxml-libxml-perl (2.0207+dfsg+really+2.0134-5+deb13u1) trixie; urgency=3Dm= edium . * Team upload. * fix: replace domParseChar with xmlValidateName to prevent OOB UTF-8 read (CVE-2026-8177) (Closes: #1136300) Checksums-Sha1:=20 49ad6d40c30b718c2cf73b61b093cae8179139f4 2611 libxml-libxml-perl_2.0207+dfsg= +really+2.0134-5+deb13u1.dsc d4290ae0b2eb2553c72ec271e02ce807162d614f 17756 libxml-libxml-perl_2.0207+dfs= g+really+2.0134-5+deb13u1.debian.tar.xz Checksums-Sha256:=20 8073aa85e07dc5dbad11336b42a17212662fe2b839a39ed5ede3c67257d5b3ec 2611 libxml= -libxml-perl_2.0207+dfsg+really+2.0134-5+deb13u1.dsc a372df2628183ef563975e366685caf2f2c52fe9c3344eb14e22ebfa5af31997 17756 libxm= l-libxml-perl_2.0207+dfsg+really+2.0134-5+deb13u1.debian.tar.xz Files:=20 b0b6848bb95ce7a7265c6dba8c060699 2611 perl optional libxml-libxml-perl_2.020= 7+dfsg+really+2.0134-5+deb13u1.dsc 9ac2bb236b16738a9ffd41480822a538 17756 perl optional libxml-libxml-perl_2.02= 07+dfsg+really+2.0134-5+deb13u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmo/yRxfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89ElWQP/25b7GX8FcjDF+qjnQTWBiZ2FF4ULBU6 oJL0WSQNPRTGp+3RDORNz2yLiYDXpFzKppvga0h2vCM3ZwT7JTYu7bWmtJLhv2Mc LwWKjX5Yz+6y1JY65CsRtRuQJbl809sECqluqJeg0H5+kjHE2QTNkDHaQXqMqc1j ZDozMzSQp3WZ/AWpW5XT6sjqjIikzeGbFYqKMRvrlMMEx3qehttt5DbFD2BzGMnf P8/G4fTPna1z40dUFtIfB/mVD9IeD6A/iRKL48N3OxXyxTfqJL5DX8lovcdWWNZA XRB4cSW7unIdVemwBetreZPgsRQBwQsMTmJK1qrc5dRAoURk7Qsri1TZRmBT6BfF V8Z1chfnlbTkPSn3N8+42fYiPnwYKUvVCRj3H7tusFaVXi9DgDQvWdE9RoYFG/B7 2GHI6VAuHCR3yGFdg/7f8sPhByYUpzjajQmJhPYTBcKlsfQtkGiEyoNtK0CEzkFP g0fr5Gul8icIBRemCkb7lHXIuZgAzkmsKkvnETJX/eDLpi8qyEwoJgQ6FDM973B4 8tV2tIeQAZp1Of1gEtQGLPy1n6u/vZtjnlqik5YTYKhr9SfaQUSeBr4foI61O/+S JK1pHCwZr1PTaOuTMhR6BejC2k1coj+7DRFlW8Kq9QziMYc+8gYMCBlDn0v6NgVy NqH15FXF93sl =3DHcj2 -----END PGP SIGNATURE----- --===============0533656355333895988== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaj/mMAAKCRCb9qggYcy5 IStQAP439Pf+3zGoEpJoWGl15mPYLDGs+lUlEnj5WPoD4R3IqwEAzswB6jbjGbel tAVnqS4f9BF3Ftrew511/fKL8WoCeQU= =SXQd -----END PGP SIGNATURE----- --===============0533656355333895988==-- ]