Security Advisories (1)
CVE-2015-8978 (2015-07-21)

An example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML.

Changes for version 0.60 - 2003-08-18

  • Merged SOAP::MIME into SOAP::Lite's core
  • Cleaned up the UI for the Makefile.PL script - it now detects and indicated whether certain Perl modules have been detected. The table displaying installation preferences has been substantially cleaned up, the code is much more modular and relies on a simple data structure representing potential module dependencies.
  • Made the Makefile.PL script iterative - meaning, the user will be continually be presented with their preferences until they explicity choose to accept them and continue (bug 747295)
  • Differentiate between xsd:int and xsd:long to fix interoperability bug with Java Web services ! Fixed MIME interoperability bug with Apache Axis - Axis' MIME parser requires that MIME boundaries are terminiated by a CRLF character where the MIME::Tools package only outputs a CR character. A patch was integrated into the MIME::Tools module which allows SOAP::Lite to specify its own MIME Boundary delimiter ! SOAP Faultcodes are now properly typed a xsd:QName, whereas before they were xsd:string - to be honest, they are left untyped so that toolkits can serialize them according to the schema (bug 747283) ! Fixed documentation error around turning on a trace for multiple "channels" (bug 747310) ! Disabled SOAPStruct (bug 747316) ! Fixed XML::Parser::Expat vulnerability (bug 747265) ! Added item in TROUBLESHOOTING section explaining that there is a bug in Perl 5.8 that prevents +autodispatch from working properly. The workaround is to use dispatch_from instead (bug 747290) ! Fixed warning when autodispatched call has no parameters (bug 747286) ! Fixed warning when empty SOAPAction specified (bug 747278) ! Turned off HTTP keep alive patch by default, however users can now turn on the patch by setting the constant PATCH_HTTP_KEEPALIVE to 1 (bug 747281) ! Removed dependency on the URI module for non-HTTP transports (bug 747306)
  • PREVIOUS RELEASES

Documentation

Interactive shell for SOAP calls
Interactive shell for XMLRPC calls

Modules

mod_perl-based SOAP server with minimum configuration
mod_perl-based XML-RPC server with minimum configuration
Client and server side SOAP implementation
Test framework for SOAP::Lite
Client side FTP support for SOAP::Lite
Server/Client side HTTP support for SOAP::Lite
Server side IO support for SOAP::Lite
Server/Client side JABBER support for SOAP::Lite
Client side no-transport support for SOAP::Lite
Client side SMTP/sendmail support for SOAP::Lite
Server/Client side MQ support for SOAP::Lite
Server side POP3 support for SOAP::Lite
Server/Client side TCP support for SOAP::Lite
Library for UDDI clients in Perl
Lightweight regexp-based XML parser
client and server implementation of XML-RPC protocol
Test framework for XMLRPC::Lite
Server/Client side HTTP support for XMLRPC::Lite
Server side POP3 support for XMLRPC::Lite
Server/Client side TCP support for XMLRPC::Lite

Provides

in lib/IO/SessionData.pm
in lib/IO/SessionSet.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Test.pm
in lib/XMLRPC/Test.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Test.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Transport/FTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/HTTP.pm
in lib/SOAP/Transport/IO.pm
in lib/SOAP/Transport/JABBER.pm
in lib/SOAP/Transport/JABBER.pm
in lib/SOAP/Transport/JABBER.pm
in lib/SOAP/Transport/LOCAL.pm
in lib/SOAP/Transport/MAILTO.pm
in lib/SOAP/Transport/MQ.pm
in lib/SOAP/Transport/MQ.pm
in lib/SOAP/Transport/POP3.pm
in lib/SOAP/Transport/TCP.pm
in lib/SOAP/Transport/TCP.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/SOAP/Lite.pm
in lib/UDDI/Lite.pm
in lib/UDDI/Lite.pm
in lib/UDDI/Lite.pm
in lib/UDDI/Lite.pm
in lib/SOAP/Transport/JABBER.pm
in lib/SOAP/Transport/MQ.pm
in lib/SOAP/Transport/TCP.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Lite.pm
in lib/XMLRPC/Test.pm
in lib/XMLRPC/Transport/HTTP.pm
in lib/XMLRPC/Transport/HTTP.pm
in lib/XMLRPC/Transport/HTTP.pm
in lib/XMLRPC/Transport/POP3.pm
in lib/XMLRPC/Transport/TCP.pm

Examples