-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 21 Mar 2026 22:00:43 +0100 Source: libxml-parser-perl Architecture: source Version: 2.47-2~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian Perl Group Changed-By: Salvatore Bonaccorso Closes: 378412 Changes: libxml-parser-perl (2.47-2~deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * Rebuild for trixie-security . libxml-parser-perl (2.47-2) unstable; urgency=medium . * Team upload. * Fix buffer overflow in parse_stream when filehandle has :utf8 layer. This improves the fix for CVE-2006-10002. * fix: off-by-one heap buffer overflow in st_serial_stack growth check (CVE-2006-10003) (Closes: #378412) Checksums-Sha1: a7dd9fa321b32eae6a7eb485eefa6f006714e814 2392 libxml-parser-perl_2.47-2~deb13u1.dsc caa4cc51930cc6bd14c1d5bb1dbf5aeae4ab952b 279029 libxml-parser-perl_2.47.orig.tar.gz 6da66928d1208ec82dabf3fb6a5fb08db2afbd1a 60524 libxml-parser-perl_2.47-2~deb13u1.debian.tar.xz Checksums-Sha256: c3d84997e6dd2b1a6d0ad5c7ac6d5bd86a8779797e0f574011617ab0d6d77008 2392 libxml-parser-perl_2.47-2~deb13u1.dsc ad4aae643ec784f489b956abe952432871a622d4e2b5c619e8855accbfc4d1d8 279029 libxml-parser-perl_2.47.orig.tar.gz ec8cdd8315837313e96d41b787b2f7586f25935d17f741a4e521a85f9f7454eb 60524 libxml-parser-perl_2.47-2~deb13u1.debian.tar.xz Files: a111fe09501566b1fc9c9c0859b2643f 2392 perl optional libxml-parser-perl_2.47-2~deb13u1.dsc 89a8e82cfd2ad948b349c0a69c494463 279029 perl optional libxml-parser-perl_2.47.orig.tar.gz 01619e5cd4ce5cd828829c4868a559cb 60524 perl optional libxml-parser-perl_2.47-2~deb13u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmnAQ1xfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EpYIP/jAvlzC7qyr05rNZkQLFvnOzQo6v+vyQ WCMy0o3GmSw/fI2JHcSfUDQYfMk8E0eDsadFA8Hhk73pybeOoRHRO4SXmj7PM0p1 yu0gc+GTgKJhh9tOAD4apzdqTtTr4NYLQ8nO1hv+0HTPPfboevAKWaBnQSifSbBD dtJAocsa0UFbv9InmYrr3rleWawe8Y8xUk1HU//U/06aArrVBeGZ6g4bc1174Olf kN2/ztCvUWrl5wv7H47rYJ3mqGi3A3zt5fv6cS/jYrZYK5lLkb8Y4iwnXhT8UqiG Z6FjfIpUAd1JRcjsDjvBv4zGEftms9SV6W9f2CdXDTnY9F2Q+YpJ5S7B3D6pA74L JeHA/sztcJr6iAkZuqS7MQaaK8K9tf1vOdy8b0I1wrZXNnFZuDXZaaO3QwEELtKa KjH3woJorVeSyA9Ssnxc940AiWIOq/JlTqT2a5zGipp8HzKk49wlKreRzDjX5wtd QBERiFl9FbnciwzHFUL9RRdNnDwtauEvHNbmN4OcWrAznlf/s7594VFsuZFLe+I7 OZr5fHtPoKLSu92sateK3B4WWGc0kQ/jfJa4QC1I0VVgClSVSTy55jIrs2MUc0kt Go5ukkrEcI1hqkSNLsmu0j/uqAl0wY9u0YWui62SGFQVxznxFuXNCw64GpXwxaUw wxbs3dfLhyNz =EACP -----END PGP SIGNATURE-----