This bug was fixed in the package libxml2 - 2.8.0+dfsg1-4ubuntu1

---------------
libxml2 (2.8.0+dfsg1-4ubuntu1) quantal; urgency=low

  * Merge with Debian (LP: #987502), remaining changes:
    - Don't drop *.la file. Some libraries still depend on it.

libxml2 (2.8.0+dfsg1-4) unstable; urgency=low

  * Sanitize the output of `xml2-config --libs`.

libxml2 (2.8.0+dfsg1-3) unstable; urgency=low

  * Remove odd output of xml2-config --libs (Closes: #675682).
  * Mark libxml2-dev "M-A: same" again, fixed xml2-config
    (Closes: #674474).

libxml2 (2.8.0+dfsg1-2) unstable; urgency=low

  * debian/control:
    - Remove "M-A: same" from libxml2-dev (Closes: #674474).
    - Add "M-A: foreign" to libxml2-doc.
  * debian/rules:
    - Style change on calling dh using --with.
    - Enable all hardening features.
    - The sed command for removing DEB_HOST_MULTIARCH is not reverted
      because it's generally a good idea to avoid it here.
  * lintian-overrides:
    - libxml2: package-name-doesnt-match-sonames
    - python-libxml2-dbg: hardening-no-fortify-functions

libxml2 (2.8.0+dfsg1-1) unstable; urgency=low

  * New upstream release. (Closes: #148220, #590934)
  * Adjust changelog of previous NMU (Closes: #674739).
  * Try to avoid useless space in /usr/bin/xml-config (Closes: #674474).

libxml2 (2.7.8.dfsg-9.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix CVE-2011-3102: off by one pointer access in xpointer.c
    (Closes: #674191).

libxml2 (2.7.8.dfsg-9) unstable; urgency=low

  * Multi-Arch ready. (Closes: #643026)
    - M-A:same packages are libxml2, libxml2-dev and libxml2-dbg.
    - M-A:foreign package is libxml2-utils, others are not M-A.
    - Library files in udeb are still placed under usr/lib directly.
  * New binary: libxml2-utils-dbg.
    Move debuggings symbols of libxml2-utils binaries to another package
    in favor of marking libxml2-dbg as M-A: same. Descriptions of related
    binary packages are slightly modified.
  * Enable hardening for Python modules. (Closes: #664107)
  * Add support for build-arch and build target, essentially make the
    package not FTBFS anymore. (Closes: #668672)
  * Use dh compat 9. Not hardcoding libdir in debian/rules.
  * Port to source format 3.0 to ease future maintenance of patches.
    - Old patches are stored in 01_historical_changes.patch
    - Do not patch Makefile.in directly, use dh_autoreconf with patches to
      configure.in and Makefile.am instead. This will not actually make
      bootstraping a new architecture more difficult since we already have
      gettext and autoconf in deep B-D, porters need to break it anyway.
    - Store doc/examples/index.html in patch to avoid ciculate B-D with
      xsltproc, we should not B-D on it.
  * debian/*.dirs: removed, useless.

libxml2 (2.7.8.dfsg-8) unstable; urgency=high

  * New maintainer (Closes: #654176).
  * Apply upstream patch to add randomization to hashing with large
    dictionaries to mitigate hash DoS (CVE-2012-0841; Closes: #660846)
  * Bump std-ver to 3.9.3, no change needed.

libxml2 (2.7.8.dfsg-7) unstable; urgency=low

  * Team upload.
  * parser.c: Fix an allocation error when copying entities.
    CVE-2011-3919. Closes: #656377.

libxml2 (2.7.8.dfsg-6) unstable; urgency=low

  * Team upload.
  * Enabled hardened build flags (Closes: #654903).
  * error.c: Fix __xmlRaiseError (Closes: #622358).
 -- Iain Lane <email address hidden>   Mon, 25 Jun 2012 13:14:43 +0100