-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 24 May 2026 21:22:59 +0200 Source: libxml-libxml-perl Architecture: source Version: 2.0207+dfsg+really+2.0134-8 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1136300 Changes: libxml-libxml-perl (2.0207+dfsg+really+2.0134-8) unstable; urgency=medium . * Team upload. * fix: replace domParseChar with xmlValidateName to prevent OOB UTF-8 read (CVE-2026-8177) (Closes: #1136300) Checksums-Sha1: fb04cdeb8d88d203e201cbbe8f05162d79cd44cf 2579 libxml-libxml-perl_2.0207+dfsg+really+2.0134-8.dsc 3b9686743977a64ba98705f2eec51bcdf6a4ef01 18780 libxml-libxml-perl_2.0207+dfsg+really+2.0134-8.debian.tar.xz Checksums-Sha256: 62a57686989563eb8e0cd2a869354901aefb0b1699ae9c6179e2de8f2ec35bbe 2579 libxml-libxml-perl_2.0207+dfsg+really+2.0134-8.dsc ae01161f82f1f7819c8b1a0e823d4c7888cc579241d0481d8ac2cbe4f5c1e5cf 18780 libxml-libxml-perl_2.0207+dfsg+really+2.0134-8.debian.tar.xz Files: b10e32c9455d823cce6c57a711573347 2579 perl optional libxml-libxml-perl_2.0207+dfsg+really+2.0134-8.dsc 82e4e3b0934aac8f25249d7729cfc5b7 18780 perl optional libxml-libxml-perl_2.0207+dfsg+really+2.0134-8.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmoTzrJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89Eaq4P/0NVFis7DtTXO6gpYexhlbVQVlnaGiTY 7HY5T0IJ5MBHQ8uXFWG/jyk+fFsSPEZVcHWxVXVmF9s2kXh58r03BQOEvfzy3ybC 3GBqc1bSriUw94mFqVjgoooxYKfaE8cmA6cVYUrv77KVwbvccGmP/5pFfjeS+hBR AtQvECR9wdyw9O2Y/OTWoXY4LXrsvzuVP8+J1iPV5nSdGFaDFjKypJu4mQv/bbwQ P9Q8GptsFrE5l5mizdzF0GUA8r6kdg5Yauk+D0BiU1vVDsWQ4pMTxcauomw209wt tsMhbm6KgHdjPxBxBTizrXX5oFjy0m69CHH/hh/jB0v3Oo5dV8hmhZW8w8fXZIWM w8ObvtCPofJuNyIHdV1iqs6/zI2fogoSU4bUzjVqiXR4EMKtgpp3GE099ToTKkeY 5R+x7uzM19lnLg0EBOeBlLRR/iERQ3jCTuWNBvxlyUZKkfAU9zCs1Ve5LTRO0FI4 39w9oDWHuHTshv1Vfta7DI5eJ8i/vu0u39wdUXb3IvUyN1ZZ1Qzp3COvJjxKT5wk u7g/iQ4S2fbH3ltNl1TbL3vTi4BDWnVm2fKJGDY5yPyPCGaISs1bVxrxMCp8Ez29 xWTT41w1TeX2Gu1jYOULI9YLHELGQeDGehyyrLRkOJ8XxiMx5mPSa+Fauwr+F3Vx gg4z7nvTgLHa =tyxi -----END PGP SIGNATURE-----