[ubuntu/resolute-proposed] libxml-parser-perl 2.47-1ubuntu1 (Accepted)

[Marc Deslauriers]

libxml-parser-perl (2.47-1ubuntu1) resolute; urgency=medium

  * SECURITY UPDATE: heap corruption in parse_stream()
    - debian/patches/CVE-2006-10002.patch: fix buffer overflow in
      parse_stream when filehandle has :utf8 layer in Expat/Expat.xs,
      t/utf8_stream.t.
    - CVE-2006-10002
  * SECURITY UPDATE: off-by-one heap buffer overflow in st_serial_stack
    - debian/patches/CVE-2006-10003.patch: fix off-by-one heap buffer
      overflow in st_serial_stack growth check in Expat/Expat.xs,
      t/deep_nesting.t.
    - CVE-2006-10003

Date: Fri, 10 Apr 2026 11:24:01 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/libxml-parser-perl/2.47-1ubuntu1
-------------- next part --------------
Format: 1.8
Date: Fri, 10 Apr 2026 11:24:01 -0400
Source: libxml-parser-perl
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 2.47-1ubuntu1
Distribution: resolute
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 libxml-parser-perl (2.47-1ubuntu1) resolute; urgency=medium
 .
   * SECURITY UPDATE: heap corruption in parse_stream()
     - debian/patches/CVE-2006-10002.patch: fix buffer overflow in
       parse_stream when filehandle has :utf8 layer in Expat/Expat.xs,
       t/utf8_stream.t.
     - CVE-2006-10002
   * SECURITY UPDATE: off-by-one heap buffer overflow in st_serial_stack
     - debian/patches/CVE-2006-10003.patch: fix off-by-one heap buffer
       overflow in st_serial_stack growth check in Expat/Expat.xs,
       t/deep_nesting.t.
     - CVE-2006-10003
Checksums-Sha1:
 11cedcaf2c02469a6cb89f6fae429c3e4c16b11d 2312 libxml-parser-perl_2.47-1ubuntu1.dsc
 a1921567d659e5b8f354cc983a66a57b5162170e 61196 libxml-parser-perl_2.47-1ubuntu1.debian.tar.xz
 c0bcf030eaeaf89c56f847028a8bd1a272f29d25 7218 libxml-parser-perl_2.47-1ubuntu1_source.buildinfo
Checksums-Sha256:
 31646fef834af332c4a27caa67847ba5c2a6d33c9d4892de5fa9643f8b0c7493 2312 libxml-parser-perl_2.47-1ubuntu1.dsc
 bd3dc1ca5260668ba2fcec11c6bd675c6de8963c6c96bb0acf3c96e23019a09d 61196 libxml-parser-perl_2.47-1ubuntu1.debian.tar.xz
 555e24dade7899760fb555b252978ccd770fda9a4f17583600cf25826bf55df4 7218 libxml-parser-perl_2.47-1ubuntu1_source.buildinfo
Files:
 bcf6a36783e6dc41ee39b2ccbebf0250 2312 perl optional libxml-parser-perl_2.47-1ubuntu1.dsc
 723aded07954e9d13e55be184b7355bd 61196 perl optional libxml-parser-perl_2.47-1ubuntu1.debian.tar.xz
 86beba496ca13a09c7df255e0bd5d09c 7218 perl optional libxml-parser-perl_2.47-1ubuntu1_source.buildinfo
Original-Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>