https://bugzilla.redhat.com/show_bug.cgi?id=1090976
--- Doc Text *updated* by Martin Prpic <mprpic(a)redhat.com> ---
It was discovered that libxml2 loaded external parameter entities even when entity
substitution was disabled. A remote attacker able to provide a specially crafted XML file
to an application linked against libxml2 could use this flaw to conduct XML External
Entity (XXE) attacks, possibly resulting in a denial of service or an information leak on
the system.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug
https://bugzilla.redhat.com/token.cgi?t=sqJS1OBLgn&a=cc_unsubscribe