Summary
Tilmann Haak discovered that XML::LibXML incorrectly handled the
expand_entities parameter in certain situations. A remote attacker could
possibly use this issue to access sensitive information.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libxml-libxml-perl | 2.0108+dfsg-1ubuntu0.1 |
Vulnerabilities 1
-
Unscored —
The _clone function in XML::LibXML before 2.0119 does not properly set the expand_entities option, which allows remote …
References
-
report
https://ubuntu.com/security/CVE-2015-3451