[openstack-dev] [Security] XML Attacks and DefusedXML on Global Requirements

Jeremy Stanley fungi at yuggoth.org
Tue Sep 27 18:52:00 UTC 2016


On 2016-09-27 11:45:14 -0700 (-0700), Travis McPeak wrote:
> There is a private security bug about it right now too.  No, not all XML
> libraries are immune now.

https://launchpad.net/bugs/1625402 which I've just now declassified.
-- 
Jeremy Stanley
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: Digital signature
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160927/7316e1b6/attachment.pgp>


More information about the OpenStack-dev mailing list