Skip to content
OpenAdvisories
High ALSA-2026:39878 1 CVE

Important: perl-XML-LibXML security update

Published Jul 15, 2026 · Updated Oct 29, 2026

Summary

This module implements a Perl interface to the GNOME libxml2 library which provides interfaces for parsing and manipulating XML files. This module allows Perl programmers to make use of the highly capable validating XML parser and the high performance DOM implementation.

Security Fix(es):

* perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names (CVE-2026-8177)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
AlmaLinux · 8 perl-XML-LibXML 1:2.0132-3.el8_10

Vulnerabilities 1

  • High 7.5

    XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences

    XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences. A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the in…

References

  • report
    https://access.redhat.com/security/cve/CVE-2026-8177
  • report
    https://bugzilla.redhat.com/2468684
  • advisory
    https://errata.almalinux.org/8/ALSA-2026-39878.html