------------------------------------------------------------------------- Debian LTS Advisory DLA-4522-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Guilhem Moulin April 04, 2026 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : libxml-parser-perl Version : 2.46-2+deb11u1 CVE ID : CVE-2006-10003 Debian Bug : 378412 It was discovered that libxml-parser-perl, a Perl module for parsing XML files, was prone to an off-by-one heap buffer overflow in `st_serial_stack()`. This update also includes a follow-up improvement change for CVE-2006-10002 (buffer overwrite in `parse_stream()`.) For Debian 11 bullseye, these problems have been fixed in version 2.46-2+deb11u1. We recommend that you upgrade your libxml-parser-perl packages. For the detailed security status of libxml-parser-perl please refer to its security tracker page at: https://security-tracker.debian.org/tracker/libxml-parser-perl Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: PGP signature