-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 22:06:33 +0100
Source: libxml-parser-perl
Binary: libxml-parser-perl libxml-parser-perl-dbgsym
Architecture: armel
Version: 2.46-4+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxml-parser-perl - Perl module for parsing XML files
Closes: 378412
Changes:
 libxml-parser-perl (2.46-4+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix buffer overflow in parse_stream when filehandle has :utf8 layer.
     This improves the fix for CVE-2006-10002.
   * fix: off-by-one heap buffer overflow in st_serial_stack growth check
     (CVE-2006-10003) (Closes: #378412)
Checksums-Sha1:
 19282ee2f5a022994a5737ca522cbf6b15c7945f 95168 libxml-parser-perl-dbgsym_2.46-4+deb12u1_armel.deb
 9229752e0689ee11d7c7d4496c67a304bf2e037c 7158 libxml-parser-perl_2.46-4+deb12u1_armel-buildd.buildinfo
 476c511c1093398013a9921a2a910d21a4d89932 196916 libxml-parser-perl_2.46-4+deb12u1_armel.deb
Checksums-Sha256:
 6219f3a9e0931a4f49c0e2f393a8c6ccedbe58b71fd0e0982658c91b963acd61 95168 libxml-parser-perl-dbgsym_2.46-4+deb12u1_armel.deb
 a8cbb0dc66ec0efdab94c953bb564e7afe32f5c05baffe379b05c13c1e2608e2 7158 libxml-parser-perl_2.46-4+deb12u1_armel-buildd.buildinfo
 20928e3a99a88d24c9021ab34fa508cccc63f91ab6f406acc10b73918eaef94b 196916 libxml-parser-perl_2.46-4+deb12u1_armel.deb
Files:
 5b2ace3f2198f9666a23ab4a2da8df0c 95168 debug optional libxml-parser-perl-dbgsym_2.46-4+deb12u1_armel.deb
 8a18db8a769e4a3abf2f0ccdf9c38825 7158 perl optional libxml-parser-perl_2.46-4+deb12u1_armel-buildd.buildinfo
 4e7e78d859eb4ba07afab47ce8c13f2f 196916 perl optional libxml-parser-perl_2.46-4+deb12u1_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEpxWVfktWxVoKRwGgJ7tNDw2WyRsFAmnASjEACgkQJ7tNDw2W
yRuznBAAnageDRC9LGovGuWQsRZbid7oUdII27iSPgCDegwgKz9FB07LuXsMZmDK
RMw7J+MU21JWLyJ2zi1a9av0x+cFvB4k8u5IpiPUkD9N7JJ8aPW5JREUcz5qAa4z
rTlTJJ72VCEuRUFXDuyB59xg9MnW0gW+GP1SHwIvARC/H74Wo8m6Usq/cA3Ckfna
ixKFZ87kmoWXvLfH9OT0jntzocKAbkGUb+7ErhaYZfhGfumDBffbsN8UbaflG9Hn
0vwipfIi7Wzuib2EjFSIe1jiZuXR4tySsCUj3JAzhXYevSFrwNzfj8ybgHDu0aUr
LNl13gd0TBg30hpRwU1Ycsu3BxkVwXKD5n6smTk2ALhX3fhPxM0tHxW3sMdulMg6
5ste5fqD2eV/bZ7KbFKaSGGK276xXXlvlvBBeQl7lJIxWwtuH7Z8h0xbS5apUXsC
dIE+zvoyRuQGWs1EXCcxqwSTzp+yBFmxLL/VGj+HvfIQ/JuZgc3Y/ndbHPvg3WxJ
2sLqjQhZDlwq+1g5J8MJnEosnFsvcgin6/wP4v79GSXw90JveESJOuvDDTIkGQCV
gX9CwruWUYA738SSOWCH3DKijhB3OLthf69MS/0MOSHNVNLbUuC46PlopUIb0bDE
c0dpaklWdPBTErBp3Yc5OQXhANMHvCbuzL9C0/xIuTo6wU1h72M=
=9sFh
-----END PGP SIGNATURE-----