MDVSA-2015:231: perl-XML-LibXML

Updated perl-XML-LibXML package fixes security vulnerability:

Tilmann Haak from discovered that XML::LibXML did not respect
the expand_entities parameter to disable processing of external
entities in some circumstances. This may allow attackers to gain
read access to otherwise protected ressources, depending on how the
library is used (CVE-2015-3451).

Leave a Reply