Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:2173-2

Опубликовано: 01 мар. 2021
Источник: suse-cvrf

Описание

Security update for perl-XML-Twig

This update for perl-XML-Twig fixes the following issues:

  • Security fix [bsc#1008644, CVE-2016-9180]
    • Added: the no_xxe option to XML::Twig::new, which causes the parse to fail if external entities are used (to prevent malicious XML to access the filesystem).
    • Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe.
    • Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument

Список пакетов

HPE Helion OpenStack 8
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-Azure
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-Azure-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-EC2-HVM
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-EC2-HVM-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-GCE
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-GCE-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-OCI-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-Azure-SAP-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-Azure-SAP-On-Demand
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-EC2-SAP-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-EC2-SAP-On-Demand
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-GCE-SAP-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-GCE-SAP-On-Demand
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-OCI-BYOS-SAP-BYOS
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
perl-XML-Twig-3.44-5.3.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server 12 SP2-BCL
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server 12 SP2-LTSS
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server 12 SP3-BCL
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server 12 SP3-LTSS
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server 12 SP4-LTSS
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
perl-XML-Twig-3.44-5.3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4
perl-XML-Twig-3.44-5.3.1
SUSE OpenStack Cloud 7
perl-XML-Twig-3.44-5.3.1
SUSE OpenStack Cloud 8
perl-XML-Twig-3.44-5.3.1
SUSE OpenStack Cloud 9
perl-XML-Twig-3.44-5.3.1
SUSE OpenStack Cloud Crowbar 8
perl-XML-Twig-3.44-5.3.1
SUSE OpenStack Cloud Crowbar 9
perl-XML-Twig-3.44-5.3.1

Ссылки

Описание

perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work. External entities are always expanded, regardless of the option's setting.

Затронутые продукты
HPE Helion OpenStack 8:perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-Azure-BYOS:perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:perl-XML-Twig-3.44-5.3.1
Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:perl-XML-Twig-3.44-5.3.1
Ссылки