Debian Security Advisory

DLA-1171-1 libxml-libxml-perl -- LTS security update

Date Reported:
14 Nov 2017
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 866676.
In Mitre's CVE dictionary: CVE-2017-10672.
More information:

The XML::LibXML perl module is affected by a "use-after-free" vulnerability which allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild() call.

For Debian 7 Wheezy, these problems have been fixed in version 2.0001+dfsg-1+deb7u2.

We recommend that you upgrade your libxml-libxml-perl packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: