search

D3f0 / coreemu

Automatically exported from code.google.com/p/coreemu
BSD 2-Clause "Simplified" License
0 stars 0 forks source link

patch to emanegentransportxml to turn of XML validation #247

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
The attached patch will turn off XML validation for EMANE's 
emanegentransportxml script.

This resolves a problem when libxml2 is updated to e.g. version 
2.7.8.dfsg-5.1ubuntu4.7 (with Ubuntu 12.04):

  * SECURITY UPDATE: resource exhaustion via external parameter entities
    - parser.c: do not fetch external parameter entities.
    - https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e017260c854df
    - CVE-2014-0191

Original issue reported on code.google.com by ahrenh...@gmail.com on 2 Jun 2014 at 9:54

Attachments:

GoogleCodeExporter commented 9 years ago

Original comment by ahrenh...@gmail.com on 2 Jun 2014 at 9:55

GoogleCodeExporter commented 9 years ago 
this is not a CORE issue and works without patch for libxml2 version 
2.7.8.dfsg-5.1ubuntu4.9

Original comment by ahrenh...@gmail.com on 29 Jul 2014 at 2:04