Debian Patches

Status for libxml-libxml-perl/2.0207+dfsg+really+2.0134-1+deb12u1

Patch Description Author Forwarded Bugs Origin Last update
fail-build-no-libxml2.patch Trigger build failure when libxml2 is not found Alessandro Ghedini <ghedo@debian.org> not-needed upstream vendor 2018-06-23
disable_runtime-version_warning.patch disable the runtime libxml2 version check gregor herrmann <gregoa@debian.org> yes debian upstream vendor 2015-08-26
test_against_runtime-version.patch check the runtime version of libxml2 not the one the package was built against Doesn't make a difference at build time, but e.g. for later run autopkgtests. gregor herrmann <gregoa@debian.org> not-needed vendor 2020-02-28
fix-replace-domParseChar-with-xmlValidateName-to-pre.patch fix: replace domParseChar with xmlValidateName to prevent OOB UTF-8 read

domParseChar() read continuation bytes for multi-byte UTF-8 sequences without
validating they exist or have required 10xxxxxx form. Truncated sequences like
"a\xF0" caused heap reads past NUL terminator. Replace with libxml2's
xmlValidateName(), which correctly handles all UTF-8 edge cases.

Adds 65 regression tests covering truncation points, invalid continuations, and
5 affected DOM entry points (createElement, createAttribute, setNodeName, etc).

Fixes https://github.com/cpan-authors/XML-LibXML/issues/146
Toddr Bot <toddbot@rinaldo.us> no debian https://github.com/cpan-authors/XML-LibXML/commit/059abf5f9336e2213794b5b545c707394cca3ac7 2026-05-19

All known versions for source package 'libxml-libxml-perl'

Links