-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 22:06:33 +0100
Source: libxml-parser-perl
Binary: libxml-parser-perl libxml-parser-perl-dbgsym
Architecture: i386
Version: 2.46-4+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxml-parser-perl - Perl module for parsing XML files
Closes: 378412
Changes:
 libxml-parser-perl (2.46-4+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix buffer overflow in parse_stream when filehandle has :utf8 layer.
     This improves the fix for CVE-2006-10002.
   * fix: off-by-one heap buffer overflow in st_serial_stack growth check
     (CVE-2006-10003) (Closes: #378412)
Checksums-Sha1:
 234ace6347e0c65d76603b57b01cb10843406046 85064 libxml-parser-perl-dbgsym_2.46-4+deb12u1_i386.deb
 9650e35f0fe6bd2b0bd439fcbc02e161589fde6e 7241 libxml-parser-perl_2.46-4+deb12u1_i386-buildd.buildinfo
 58dff806170117c4e3d86da820fb4be10af6b71d 201872 libxml-parser-perl_2.46-4+deb12u1_i386.deb
Checksums-Sha256:
 9ffbaf95fe6a25666268f34e237c6f69c7c80944cf5bc84bb8af71678cf79b17 85064 libxml-parser-perl-dbgsym_2.46-4+deb12u1_i386.deb
 4421bc2ca2efcafe635f3db27200068d0ef19b57b9b9a77d9c62005361ea9013 7241 libxml-parser-perl_2.46-4+deb12u1_i386-buildd.buildinfo
 fefa7fa731957b602f668a203d7f72cb115a12bed1647a27f3a944b4f600aec3 201872 libxml-parser-perl_2.46-4+deb12u1_i386.deb
Files:
 8cf681b6be2cf5fb7c90d9c9fc16dff6 85064 debug optional libxml-parser-perl-dbgsym_2.46-4+deb12u1_i386.deb
 d801be866b7d0fded3f5ca3554a2ba8b 7241 perl optional libxml-parser-perl_2.46-4+deb12u1_i386-buildd.buildinfo
 1683ebc025396da10b260c6d6699184e 201872 perl optional libxml-parser-perl_2.46-4+deb12u1_i386.deb

-----BEGIN PGP SIGNATURE-----
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=kIRL
-----END PGP SIGNATURE-----