Debian alert DLA-4655-1 (libhtml-parser-perl)

From:
             
 
Guilhem Moulin <guilhem@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4655-1] libhtml-parser-perl security update
Date:
             
 
Sun, 28 Jun 2026 12:37:28 +0200
Message-ID:
             
 
<akD5Zx46_g_sRSTW@debian.org>
-------------------------------------------------------------------------
Debian LTS Advisory DLA-4655-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                       Guilhem Moulin
June 28, 2026                                 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package        : libhtml-parser-perl
Version        : 3.75-1+deb11u1
CVE ID         : CVE-2026-8829

Paul Johnson discovered that libhtml-parser-perl, a collection of
modules that parse HTML text documents, read freed heap memory in
_decode_entities().

For Debian 11 bullseye, this problem has been fixed in version
3.75-1+deb11u1.

We recommend that you upgrade your libhtml-parser-perl packages.

For the detailed security status of libhtml-parser-perl please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/libhtml-parse...

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=q8Or
-----END PGP SIGNATURE-----