Security Advisories (2)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

Changes for version 1.49

  • memory management has been completely rewritten. now the module should not cause that many memory leaks (special thanks to Merijn Broeren and Petr Pajas for providing testcases)
  • more libxml2 functions are used
  • DOM API is more Level 3 conform
  • ownerDocument fixed
  • parser validation bug fixed (reported by Erik Ray)
  • made parse_xml_chunk() report errors
  • fixed the PI interface
  • xpath.pl example
  • better namespace support
  • improved NamedNodeMap support
  • restructured the interfaces
  • HTML document nodes are recognized as HTML doc nodes instead of plain nodes
  • XML::LibXML::SAX::Parser able to handle HTML docs now (patch by D. Hageman [dhageman@dracken.com])
  • added serialization flags ($setTagCompression, $skipDtd and $skipXMLDeclaration)
  • more documentation

Documentation

The DOM Attribute Class
The DOM CDATASection Class
The DOM Comment Class
XML::LibXML DOM implementation
DOM Document Class
DOM L2 Implementation of a Document Fragment
A Class implementing Dtd Nodes
The DOM Element Class
A Namespace Class to hold namespace nodes
"virtual" Base Class DOM-Nodes
The DOM Text Node Class

Modules

Interface to the gnome libxml2 library
Boolean true/false values
Simple string values.
a list of XML document nodes
Simple numeric values.
build a LibXML tree from SAX events
Generate SAX events from a LibXML tree
LibXML DOM based SAX Parser

Provides

in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in lib/XML/LibXML/SAX/Generator.pm
in LibXML.pm