https://bugzilla.redhat.com/show_bug.cgi?id=1377996
Bug ID: 1377996 Summary: perl-libxml-perl: Expanding external entities by default Product: Security Response Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team@redhat.com Reporter: amaris@redhat.com CC: jplesnik@redhat.com, perl-devel@lists.fedoraproject.org, perl-maint-list@redhat.com, ppisar@redhat.com, psabata@redhat.com
It was found that XML::LibXML is vulnerable to XXE attack as it has enabled external entity loading by default.
Bug report:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838097