10869 2017-01-02 07:40:45 +0000 CVE-2016-9318 for libxml 2018-02-02 20:40:20 +0000 1 1 7 Build System, Metadata & Runtime Security - Recipe Upgrade security unspecified x86 Multiple RESOLVED FIXED Undecided normal --- 1 ismo.puustinen sgw bluelightning stephano --- --- Don't know oldest_to_newest 69426 0 ismo.puustinen 2017-01-02 07:40:45 +0000 See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9318 : libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attackers to conduct XML External Entity (XXE) attacks via a crafted document. 77187 1 bluelightning 2017-09-27 22:54:12 +0000 The patch for this is in master, pyro and morty - can we mark this resolved? 79322 2 stephano 2018-02-02 20:40:20 +0000 Pyro: 0dd44c00e3b2fbc3befc3f361624a3a60161d979 Morty: 53c39f29578a4468e7f64a7403e77c28d951de6a