Bug#1140835: trixie-pu: package libxml-libxml-perl/2.0207+dfsg+really+2.0134-5+deb13u1

This is a multi-part MIME message sent by reportbug.


--===============8088032768251212432==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Package: release.debian.org
Severity: normal
Tags: trixie
X-Debbugs-Cc: [email protected], [email protected], [email protected], [email protected], [email protected]
Control: affects -1 + src:libxml-libxml-perl
User: [email protected]
Usertags: pu

Hi,

[ Reason ]
libxml-libxml-perl is prone to CVE-2026-8177, #1136300, it is not
severe enough to warrant a security advisory.

[ Impact ]
Remains open to CVE-2026-8177

[ Tests ]
Extensive test suite and in addition done a debusine upload as per
https://debusine.debian.net/debian/developers/work-request/895666/ .

[ Risks ]
Patch taken upstream. Fix exposed for roughly a month in unstable (and
migrated to testing).

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
Fix issue by replacing domParseChar with xmlValidateName to prevent
OOB UTF-8 read.

[ Other info ]
None.

Regards,
Salvatore

--===============8088032768251212432==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="libxml-libxml-perl_2.0207+dfsg+really+2.0134-5+deb13u1.debdiff"
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--===============8088032768251212432==--