Bug#1140836: bookworm-pu: package libxml-libxml-perl/2.0207+dfsg+really+2.0134-1+deb12u1

This is a multi-part MIME message sent by reportbug.


--===============8411212917525071612==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Package: release.debian.org
Severity: normal
Tags: bookworm
X-Debbugs-Cc: [email protected], [email protected], [email protected], [email protected], [email protected], [email protected]
Control: affects -1 + src:libxml-libxml-perl
User: [email protected]
Usertags: pu

Hi,

[ Reason ]
libxml-libxml-perl is prone to CVE-2026-8177, #1136300, it is not
severe enough to warrant a security advisory.

[ Impact ]
Remains open to CVE-2026-8177

[ Tests ]
Extensive test suite and in addition done a debusine upload as per
https://debusine.debian.net/debian/developers/work-request/896109/ .

[ Risks ]
Patch taken upstream. Fix exposed for roughly a month in unstable (and
migrated to testing).

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
Fix issue by replacing domParseChar with xmlValidateName to prevent
OOB UTF-8 read.

[ Other info ]
None.

Regards,
Salvatore

--===============8411212917525071612==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="libxml-libxml-perl_2.0207+dfsg+really+2.0134-1+deb12u1.debdiff"
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--===============8411212917525071612==--