-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 21 Mar 2026 22:06:33 +0100
Source: libxml-parser-perl
Binary: libxml-parser-perl libxml-parser-perl-dbgsym
Architecture: armhf
Version: 2.46-4+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libxml-parser-perl - Perl module for parsing XML files
Closes: 378412
Changes:
 libxml-parser-perl (2.46-4+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fix buffer overflow in parse_stream when filehandle has :utf8 layer.
     This improves the fix for CVE-2006-10002.
   * fix: off-by-one heap buffer overflow in st_serial_stack growth check
     (CVE-2006-10003) (Closes: #378412)
Checksums-Sha1:
 76e0af4e8e584d6f023dae392c85f549db5d95f7 98084 libxml-parser-perl-dbgsym_2.46-4+deb12u1_armhf.deb
 bd4d2bb502da47b06154f15374843f9330b0771a 7160 libxml-parser-perl_2.46-4+deb12u1_armhf-buildd.buildinfo
 c95e738c06a742fbaabe8dde15b7604998d8275e 197604 libxml-parser-perl_2.46-4+deb12u1_armhf.deb
Checksums-Sha256:
 5aa41366dbe37365d1f7e89771a1a7145f0920f8709fd1036eb7ffdf0892f12d 98084 libxml-parser-perl-dbgsym_2.46-4+deb12u1_armhf.deb
 62454add51486128cf074e3499c258ee633f0a4319dbc1e8e588d5bde46bb2b5 7160 libxml-parser-perl_2.46-4+deb12u1_armhf-buildd.buildinfo
 443f2eec79913fa5a1af9c8dfb9eb7a10517368037b65d9c59bb7669a0408b90 197604 libxml-parser-perl_2.46-4+deb12u1_armhf.deb
Files:
 6350b1fce9a965d94c574aa0741a6a9a 98084 debug optional libxml-parser-perl-dbgsym_2.46-4+deb12u1_armhf.deb
 711f45040ba9cfd371fb1f23110765b9 7160 perl optional libxml-parser-perl_2.46-4+deb12u1_armhf-buildd.buildinfo
 b4da2b0cd9a813b5870d1623836b99c4 197604 perl optional libxml-parser-perl_2.46-4+deb12u1_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=/e7R
-----END PGP SIGNATURE-----