rpms/perl-XML-LibXML
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Perl interface to the libxml2 library
7 Commits 8 Branches 12 Tags 220 KiB
Diff 100%
153259b4d2
Go to file
RHEL Packaging Agent 153259b4d2 Fix CVE-2026-8177: out-of-bounds UTF-8 heap read in perl-XML-LibXML 
Backport upstream commit 059abf5f to fix CVE-2026-8177, an
out-of-bounds UTF-8 read in domParseChar(). The patch replaces
the vulnerable domParseChar() function with libxml2's
xmlValidateName() to prevent heap reads past the NUL terminator
on truncated or malformed multi-byte UTF-8 sequences, and adds
65 regression tests covering the affected DOM entry points.

CVE: CVE-2026-8177
Upstream patches:
 - 059abf5f93.patch
Resolves: RHEL-186536

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-29 11:05:39 +00:00
.gitignore RHEL 9.0.0 Alpha bootstrap 2020-10-14 15:43:54 -07:00
perl-XML-LibXML-2.0206-CVE-2026-8177.patch Fix CVE-2026-8177: out-of-bounds UTF-8 heap read in perl-XML-LibXML 2026-07-29 11:05:39 +00:00
perl-XML-LibXML.spec Fix CVE-2026-8177: out-of-bounds UTF-8 heap read in perl-XML-LibXML 2026-07-29 11:05:39 +00:00
sources RHEL 9.0.0 Alpha bootstrap 2020-10-14 15:43:54 -07:00
XML-LibXML-2.0202-Parse-an-ampersand-entity-in-SAX-interface.patch RHEL 9.0.0 Alpha bootstrap 2020-10-14 15:43:54 -07:00
XML-LibXML-2.0206-Use-pkgconfig-instead-of-Alien-Libxml2.patch Merged update from upstream sources 2020-11-30 15:20:33 +00:00