Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Fedora 44 perl-XML-Parser Addresses Critical DoS Vulnerabilities and Fixes

fedora
Calendar Grey March 28, 2026
Dist Fedora Esm H88
Fixes CVE-2006-10002 and CVE-2006-10003 for Fedora 44's perl-XML-Parser. Immediate update recommended for security.
2.51 bump - Fix CVE-2006-10002, CVE-2006-10003

Summary

This module provides ways to parse XML documents. It is built on top

of XML::Parser::Expat, which is a lower level interface to James

Clark's expat library. Each call to one of the parsing methods creates

a new instance of XML::Parser::Expat which is then used to parse the

document. Expat options may be provided when the XML::Parser object is

created. These options are then passed on to the Expat object on each

parse call. They can also be given as extra arguments to the parse

methods, in which case they override options given at XML::Parser

creation time.

Update Information:

2.51 bump - Fix CVE-2006-10002, CVE-2006-10003

Change Log

* Mon Mar 23 2026 Jitka Plesnikova - 2.51-1 - 2.51 bump (rhbz#2448965) - Fix CVE-2006-10002 (rhbz#2449269), CVE-2006-10003 (rhbz#2449278)

References


[ 1 ] Bug #2448965 - perl-XML-Parser-2.51 is available https://bugzilla.redhat.com/show_bug.cgi?id=2448965 [ 2 ] Bug #2449269 - CVE-2006-10002 perl-XML-Parser: XML::Parser for Perl: Heap corruption and denial of service from crafted XML input [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2449269 [ 3 ] Bug #2449278 - CVE-2006-10003 perl-XML-Parser: XML::Parser: Memory corruption via deeply nested XML files [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2449278

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-dcb80f8e23' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: perl-XML-Parser
Product: Fedora 44
Version: 2.51
Release: 1.fc44
Summary: Perl module for parsing XML documents

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here