-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 22:06:33 +0100
Source: libxml-parser-perl
Binary: libxml-parser-perl libxml-parser-perl-dbgsym
Architecture: amd64
Version: 2.46-4+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxml-parser-perl - Perl module for parsing XML files
Closes: 378412
Changes:
 libxml-parser-perl (2.46-4+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix buffer overflow in parse_stream when filehandle has :utf8 layer.
     This improves the fix for CVE-2006-10002.
   * fix: off-by-one heap buffer overflow in st_serial_stack growth check
     (CVE-2006-10003) (Closes: #378412)
Checksums-Sha1:
 0b9b15081651b961efadbd7ae8936638623162fb 95832 libxml-parser-perl-dbgsym_2.46-4+deb12u1_amd64.deb
 7b23bef30b70e4030e0a0ec8bed391ff1d1b5e7b 7317 libxml-parser-perl_2.46-4+deb12u1_amd64-buildd.buildinfo
 657d8818d36f13bad2edd77243fe6346b8d74403 200692 libxml-parser-perl_2.46-4+deb12u1_amd64.deb
Checksums-Sha256:
 a1c40c8c59fcf1cd03cc02e63776b5ed60a947c47c8612e9eb6a8e5bc62f853d 95832 libxml-parser-perl-dbgsym_2.46-4+deb12u1_amd64.deb
 ed90382d354b95ea1c505daabfaa9228c5510d02d123e2083ea72f02b34718d2 7317 libxml-parser-perl_2.46-4+deb12u1_amd64-buildd.buildinfo
 b8d56d3827ce7b8703438fd0d0665de0507ef54746b623c5ff711002fe4ac4d8 200692 libxml-parser-perl_2.46-4+deb12u1_amd64.deb
Files:
 2feb8a2c640569be829ec5f5e5a904ac 95832 debug optional libxml-parser-perl-dbgsym_2.46-4+deb12u1_amd64.deb
 9452a145edb69cc97e6c8919943545d3 7317 perl optional libxml-parser-perl_2.46-4+deb12u1_amd64-buildd.buildinfo
 5f4df18ac77b7cc403de6258fa17a848 200692 perl optional libxml-parser-perl_2.46-4+deb12u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=HSC0
-----END PGP SIGNATURE-----