Debian Libxml-Libxml-Perl vulnerabilities

CVE-2017-10672 [CRITICAL] CVE-2017-10672: libxml-libxml-perl - Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote at... Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call. Scope: local bookworm: resolved (fixed in 2.0128+dfsg-5) bullseye: resolved (fixed in 2.0128+dfsg-5) forky: resolved (fixed in 2.0128+dfsg-5) sid: resolved (fixed in 2.0128+dfsg-5) trixi

CVE-2015-3451 [MEDIUM] CVE-2015-3451: libxml-libxml-perl - The _clone function in XML::LibXML before 2.0119 does not properly set the expan... The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function. Scope: local bookworm: resolved (fixed in 2.0116+dfsg-2) bullseye: resolved (fixed in 2.0116+dfsg-2) forky: resolved (fix