Fedora 45 : perl-XML-Bare (2026-3a2db4368a)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-3a2db4368a advisory. XML::Bare versions through 0.53 for Perl will hang in an infinite loop when parsing malformed attributes. This packages fixes this issue. Fixes...

CVE-2026-57074

A flaw was found in perl-XML-Bare. The parsercparse function, which handles XML parsing, contains an unbounded character lookahead vulnerability. A remote attacker could exploit this by providing a specially crafted, truncated XML string. This could cause the parser to attempt to read data beyond...