Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Fri, 05 Jul 2013 08:48:04 -0400
From: Marc Deslauriers <>
Subject: CVE Request: libxml2 external parsed entities issue


libxml2 earlier than 2.9.0 fetches external parsed entities by default, with no
way to disable the behaviour.

Fixed by the following commit:

More Information:

Could a CVE please be assigned to this issue?



Marc Deslauriers
Ubuntu Security Engineer     |
Canonical Ltd.               |

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.