rpms/perl-XML-LibXML
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Perl interface to the libxml2 library
178 Commits 8 Branches 12 Tags 220 KiB
Diff 100%
5f4d63d05b
Go to file
RHEL Packaging Agent 5f4d63d05b Fix CVE-2026-8177: out-of-bounds UTF-8 heap read in perl-XML-LibXML 
Backport upstream commit 059abf5f to fix an out-of-bounds
heap read in domParseChar() (CVE-2026-8177). The vulnerable
function is removed and replaced with libxml2's
xmlValidateName(), which correctly handles all UTF-8 edge
cases including truncated sequences and invalid continuation
bytes. Includes 65 regression tests covering the affected
DOM entry points.

CVE: CVE-2026-8177
Upstream patches:
 - 059abf5f93.patch
Resolves: RHEL-186531

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-05 13:18:25 +00:00
.fmf Package tests 2021-04-19 18:48:58 +02:00
plans Package tests 2021-04-19 18:48:58 +02:00
tests Update tests and gating.yaml 2024-07-08 14:30:34 +02:00
.gitignore 2.0210 bump (rhbz#2260127) 2024-01-25 15:11:10 +01:00
gating.yaml Update tests and gating.yaml 2024-07-08 14:30:34 +02:00
perl-XML-LibXML-2.0210-CVE-2026-8177.patch Fix CVE-2026-8177: out-of-bounds UTF-8 heap read in perl-XML-LibXML 2026-08-05 13:18:25 +00:00
perl-XML-LibXML.rpmlintrc Make tests subpackage noarch 2021-06-25 10:16:05 +02:00
perl-XML-LibXML.spec Fix CVE-2026-8177: out-of-bounds UTF-8 heap read in perl-XML-LibXML 2026-08-05 13:18:25 +00:00
sources 2.0210 bump (rhbz#2260127) 2024-01-25 15:11:10 +01:00
XML-LibXML-2.0202-Parse-an-ampersand-entity-in-SAX-interface.patch Fix parsing ampersand entities in SAX interface 2020-01-28 17:27:47 +01:00
XML-LibXML-2.0208-Use-pkgconfig-instead-of-Alien-Libxml2.patch 2.0208 bump 2022-09-30 11:36:25 +02:00