OESA-2026-3404

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-3404
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2026-3404.json
JSON Data
https://api.osv.dev/v1/vulns/OESA-2026-3404
Upstream
Published
2026-08-20T09:54:29Z
Modified
2026-08-20T10:15:06.354743528Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
perl-XML-LibXML security update
Details

This module is Perl Binding for libxml2, which implements a Perl interface to the GNOME libxml2 library. This module provides interfaces for parsing and manipulating XML files and allows Perl programmers to use the highly capable validating XML parser and the high performance DOM implementation.

Security Fix(es):

XML::LibXML versions through 2.0210 for Perl read out-of-bounds heap memory when parsing XML node names containing truncated UTF-8 byte sequences.

A node name ending in the middle of a multi byte UTF-8 sequence causes the parser to read past the end of the input string into adjacent heap memory.

Any Perl process that passes attacker controlled strings to XML::LibXML's DOM node-name methods can reach this path on the default API. The likely consequence is a crash, causing denial of service.(CVE-2026-8177)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4
perl-XML-LibXML

Package

Name
perl-XML-LibXML
Purl
pkg:rpm/openEuler/perl-XML-LibXML&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0134-2.oe2003sp4

Ecosystem specific 

{
    "x86_64": [
        "perl-XML-LibXML-2.0134-2.oe2003sp4.x86_64.rpm",
        "perl-XML-LibXML-debuginfo-2.0134-2.oe2003sp4.x86_64.rpm",
        "perl-XML-LibXML-debugsource-2.0134-2.oe2003sp4.x86_64.rpm",
        "perl-XML-LibXML-help-2.0134-2.oe2003sp4.x86_64.rpm"
    ],
    "aarch64": [
        "perl-XML-LibXML-2.0134-2.oe2003sp4.aarch64.rpm",
        "perl-XML-LibXML-debuginfo-2.0134-2.oe2003sp4.aarch64.rpm",
        "perl-XML-LibXML-debugsource-2.0134-2.oe2003sp4.aarch64.rpm",
        "perl-XML-LibXML-help-2.0134-2.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "perl-XML-LibXML-2.0134-2.oe2003sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3404.json"
openEuler:22.03-LTS-SP4
perl-XML-LibXML

Package

Name
perl-XML-LibXML
Purl
pkg:rpm/openEuler/perl-XML-LibXML&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0207-5.oe2203sp4

Ecosystem specific 

{
    "x86_64": [
        "perl-XML-LibXML-2.0207-5.oe2203sp4.x86_64.rpm",
        "perl-XML-LibXML-debuginfo-2.0207-5.oe2203sp4.x86_64.rpm",
        "perl-XML-LibXML-debugsource-2.0207-5.oe2203sp4.x86_64.rpm"
    ],
    "aarch64": [
        "perl-XML-LibXML-2.0207-5.oe2203sp4.aarch64.rpm",
        "perl-XML-LibXML-debuginfo-2.0207-5.oe2203sp4.aarch64.rpm",
        "perl-XML-LibXML-debugsource-2.0207-5.oe2203sp4.aarch64.rpm"
    ],
    "src": [
        "perl-XML-LibXML-2.0207-5.oe2203sp4.src.rpm"
    ],
    "noarch": [
        "perl-XML-LibXML-help-2.0207-5.oe2203sp4.noarch.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3404.json"
openEuler:24.03-LTS-SP1
perl-XML-LibXML

Package

Name
perl-XML-LibXML
Purl
pkg:rpm/openEuler/perl-XML-LibXML&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0209-4.oe2403sp1

Ecosystem specific 

{
    "x86_64": [
        "perl-XML-LibXML-2.0209-4.oe2403sp1.x86_64.rpm",
        "perl-XML-LibXML-debuginfo-2.0209-4.oe2403sp1.x86_64.rpm",
        "perl-XML-LibXML-debugsource-2.0209-4.oe2403sp1.x86_64.rpm",
        "perl-XML-LibXML-help-2.0209-4.oe2403sp1.x86_64.rpm"
    ],
    "aarch64": [
        "perl-XML-LibXML-2.0209-4.oe2403sp1.aarch64.rpm",
        "perl-XML-LibXML-debuginfo-2.0209-4.oe2403sp1.aarch64.rpm",
        "perl-XML-LibXML-debugsource-2.0209-4.oe2403sp1.aarch64.rpm",
        "perl-XML-LibXML-help-2.0209-4.oe2403sp1.aarch64.rpm"
    ],
    "src": [
        "perl-XML-LibXML-2.0209-4.oe2403sp1.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3404.json"
openEuler:24.03-LTS-SP3
perl-XML-LibXML

Package

Name
perl-XML-LibXML
Purl
pkg:rpm/openEuler/perl-XML-LibXML&distro=openEuler-24.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0209-4.oe2403sp3

Ecosystem specific 

{
    "x86_64": [
        "perl-XML-LibXML-2.0209-4.oe2403sp3.x86_64.rpm",
        "perl-XML-LibXML-debuginfo-2.0209-4.oe2403sp3.x86_64.rpm",
        "perl-XML-LibXML-debugsource-2.0209-4.oe2403sp3.x86_64.rpm",
        "perl-XML-LibXML-help-2.0209-4.oe2403sp3.x86_64.rpm"
    ],
    "aarch64": [
        "perl-XML-LibXML-2.0209-4.oe2403sp3.aarch64.rpm",
        "perl-XML-LibXML-debuginfo-2.0209-4.oe2403sp3.aarch64.rpm",
        "perl-XML-LibXML-debugsource-2.0209-4.oe2403sp3.aarch64.rpm",
        "perl-XML-LibXML-help-2.0209-4.oe2403sp3.aarch64.rpm"
    ],
    "src": [
        "perl-XML-LibXML-2.0209-4.oe2403sp3.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3404.json"
openEuler:24.03-LTS-SP4
perl-XML-LibXML

Package

Name
perl-XML-LibXML
Purl
pkg:rpm/openEuler/perl-XML-LibXML&distro=openEuler-24.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0209-4.oe2403sp4

Ecosystem specific 

{
    "x86_64": [
        "perl-XML-LibXML-2.0209-4.oe2403sp4.x86_64.rpm",
        "perl-XML-LibXML-debuginfo-2.0209-4.oe2403sp4.x86_64.rpm",
        "perl-XML-LibXML-debugsource-2.0209-4.oe2403sp4.x86_64.rpm",
        "perl-XML-LibXML-help-2.0209-4.oe2403sp4.x86_64.rpm"
    ],
    "aarch64": [
        "perl-XML-LibXML-2.0209-4.oe2403sp4.aarch64.rpm",
        "perl-XML-LibXML-debuginfo-2.0209-4.oe2403sp4.aarch64.rpm",
        "perl-XML-LibXML-debugsource-2.0209-4.oe2403sp4.aarch64.rpm",
        "perl-XML-LibXML-help-2.0209-4.oe2403sp4.aarch64.rpm"
    ],
    "src": [
        "perl-XML-LibXML-2.0209-4.oe2403sp4.src.rpm"
    ]
}

Database specific

source 
"https://repo.openeuler.org/security/data/osv/OESA-2026-3404.json"