-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 21 Mar 2026 22:06:33 +0100 Source: libxml-parser-perl Binary: libxml-parser-perl libxml-parser-perl-dbgsym Architecture: ppc64el Version: 2.46-4+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Salvatore Bonaccorso Description: libxml-parser-perl - Perl module for parsing XML files Closes: 378412 Changes: libxml-parser-perl (2.46-4+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Fix buffer overflow in parse_stream when filehandle has :utf8 layer. This improves the fix for CVE-2006-10002. * fix: off-by-one heap buffer overflow in st_serial_stack growth check (CVE-2006-10003) (Closes: #378412) Checksums-Sha1: a64fb198d083fd522ebb2428bff42e252cf6898d 100704 libxml-parser-perl-dbgsym_2.46-4+deb12u1_ppc64el.deb 7630c244a7fe2ff2ff356fe0b7eb98b423541b77 7332 libxml-parser-perl_2.46-4+deb12u1_ppc64el-buildd.buildinfo 9ac0ea4f983bc1d016fc15f21cd52c6c2302551c 201196 libxml-parser-perl_2.46-4+deb12u1_ppc64el.deb Checksums-Sha256: 38efdebad42a25c9c9d702cf6ad2a2395f254eb47ead9ec3f70b986b357aea5c 100704 libxml-parser-perl-dbgsym_2.46-4+deb12u1_ppc64el.deb f6f98f4bd035f16418956524ebcc7829aa078fb6074bafe843548bd8426b7802 7332 libxml-parser-perl_2.46-4+deb12u1_ppc64el-buildd.buildinfo 7974adae8f6308c60cc880507ebe2e23f6fe22f5be2ab2185f9fd12b3243fc65 201196 libxml-parser-perl_2.46-4+deb12u1_ppc64el.deb Files: 9affaea876577280b633fed7bfaac57b 100704 debug optional libxml-parser-perl-dbgsym_2.46-4+deb12u1_ppc64el.deb 87e93b15428f9c8932d9c8377e52e667 7332 perl optional libxml-parser-perl_2.46-4+deb12u1_ppc64el-buildd.buildinfo 00588124eacd275effaf5ed9dd5a2095 201196 perl optional libxml-parser-perl_2.46-4+deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmnATIIACgkQOrVShFbI MGHEAg/9FGDGS6O3fEPofTUyvHxY3i0NcnlLPDNui6CVsi5vY87RB0tacI/zUeN1 Z+F81gz54/5U9hCpL+sB9o5zYzwV87IIjmV+oW95kIa0X2MxccG0tZf00PSGMLn8 2gB8ku3fMUhOyodsyA0s4khpJfvjV+/tykm15sl9SrfFi3drOdoj0SxEXhA4HeJP NJO+CFkH4hcmuVuh0BFGlJ+UEMGhUBoaaHC8cYYngtq8SS4xkKIhjalXDWGhygqz Y59XZO+599CIJNxk7MXCqS893e0AosCzmQgBzz6OLKJR1q6iWxqOwbQayARWd5w3 Gsv/yam6JjBqNctIjYGdvJxZysxROXw2gvq0TXhPZX8H0H4Fanu3btrJ1Z4H5HJC cgbbMydBp2jh7D+8Jbczi8HgAufs0PV8A+iVAh2GIsp69EgmNubQd2S30qFlmwHH rezmCIv88LgkCZisLlhS3AxmnzWHbzQTRbphsq76PL8HawlHT6hDiP0ldoLY9quc B7thfFEC8z7huOnDaa0VrvHI7BzybfKvJw82cC262gg8ySyrGroHgC8eo7Ieh6Cb 9W3vDJ64ei5jfNCch0NQ+qC8ASDhJ0JU411wdphs2x6Vm3rMndRfvHtIt+mr9wax OkuKGgxsbbGkgWaQWbFwxOGCz7ZP4DL25ZQdHHYkKPo7WmyBkfQ= =d1tG -----END PGP SIGNATURE-----