Sign me up Login

Details about package libnxml

Name:	libnxml (PTS)
Uploader:	Haolin Xue <tzbkk@outlook.com> (Debian QA page)
Description:	libnxml0t64 - C library for parsing, writing and creating xml 1.0/1.1 files or streams libnxml0-dev - static library and C header files for libnxml0t64

Package uploads

Upload #1

Information

Version:	0.18.6-1
Uploaded:	2026-11-15 18:52
Source package:	libnxml_0.18.6-1.dsc
Distribution:	unstable
Section:	libs
Priority:
Homepage:	https://github.com/bakulf/libnxml
Vcs-Browser:	https://salsa.debian.org/debian/libnxml
Vcs-Git:	https://salsa.debian.org/debian/libnxml.git
Closes bugs:	#934020 #1153280

Changelog

 libnxml (0.18.6-1) unstable; urgency=medium
 .
   * New upstream release.
     - Fixes CVE-2026-123202: stack-based buffer overflow when parsing
       XML names of 1022+ characters ending in a multi-byte UTF-8
       character. (Closes: #1153280)
   * New maintainer. (Closes: #934020)
   * d/control:
     - Bump debhelper to 14.
     - Bump Standards-Version to 4.7.4.
     - Remove "Priority" field.
   * d/copyright: Update "Source" field and copyright information.
   * d/patches:
     - Add "Forwarded" and "Last-Update" fields.
     - Forward multiarchify_pc_file.patch & nxml_parser.diff.
       (https://github.com/bakulf/libnxml/pull/17)

QA information

–
Package uses debhelper-compat

Debhelper compatibility level 14

–

Package is the latest upstream version

Local:	0.18.6
Upstream:	0.18.6
Url:	https://api.github.com/repos/bakulf/libnxml/tarball/refs/tags/0.18.6

–
Package is not native

Format: 3.0 (quilt)
–
"Maintainer" email is the same as the uploader
–
Package has lintian warnings
libnxml source
- W missing-debian-watch-file-standard
  - [debian/watch]
- W recommended-field
  - (in section for source) Priority [debian/control:1]
- P package-uses-experimental-debhelper-compat-version
  - 14
–
Package closes bugs in a wrong way
Errors:
- Bug #934020 is a O bug
- libnxml:
  - #934020 (Normal, O): O: libnxml -- C library for parsing, writing and
- src:libnxml:
  - #1153280 (Grave): libnxml: CVE-2026-123202
–
Package is already in Debian
- The package uploader is not currently maintaining libnxml in Debian
- Last upload was on the 2025-11-17
–
Upstream-Contact missing from d/copyright

Upstream Contact: None

Licenses: LGPL-2.0+

Comments

No comments

Upstream Contact:	None
Licenses:	LGPL-2.0+