shield Security update for perl-xml-twig

SUSE-SLE-SERVER-12-SP5-2020-2173

This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Added: the no_xxe option to XML::Twig::new, which causes the parse to fail if external entities are used (to prevent malicious XML to access the filesystem). * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument

• Release Date
  Aug 7 2020
• References
  Bugzilla: 1008644
  CVEs: CVE-2016-9180
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  perl-XML-Twig
  A perl module for processing huge XML documents in tree mode.

  3.44-5.3.1

  lock rpm

  lock src

  3.44-5.3.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  perl-XML-Twig
  A perl module for processing huge XML documents in tree mode.

  3.44-5.3.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  perl-XML-Twig
  A perl module for processing huge XML documents in tree mode.

  3.44-5.3.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  perl-XML-Twig
  A perl module for processing huge XML documents in tree mode.

  3.44-5.3.1

  lock rpm

  lock src