https://bugzilla.redhat.com/show_bug.cgi?id=1377996 --- Comment #12 from Petr Pisar <ppisar@xxxxxxxxxx> --- XML-LibXML upstream stopped enabling expansion of DTD-defined entities in <https://github.com/shlomif/perl-XML-LibXML/commit/ff99d94a5186fecf90b88379755434739550b5a9> commit and released 2.0202 version. The reproduced now prints: $ ./reproducer <?xml version="1.0"?> <!DOCTYPE foo [ <!ENTITY c PUBLIC "bar" "/etc/passwd"> <!ENTITY i "ivalue"> ]> <root> <external>&c;</external> <internal>&i;</internal> <predefined>"</predefined> <numeric>A</numeric> </root> Since it also affects entities defined in the internal DTD, I do not recommend applying the patch to stable distributions. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ perl-devel mailing list -- perl-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to perl-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
