Security Advisories (2)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

Changes for version 1.50

  • fixed major problems with the validating parser
  • fixed default behaviour of the generic parser
  • fixed attribute setting of the string parser
  • fixed external entity loading for entity expansion
  • fixed nodeValue() to handle entities and entity refs correctly
  • SAX::Parser ignores now hidden XINCLUDE nodes.
  • fixed SAX::Builder to recognize namespace declarations correctly
  • compatibility fixes
  • importNode() bug fix
  • fixed library tests and output in Makefile.PL
  • added setOwnerDocument() again
  • XML::LibXML::Document::process_xincludes reintroduced
  • global callbacks reintroduced NOTE: the Interface changed here, read XML::LibXML manpage!
  • code cleanings
  • push parser interface
  • basic native libxml2 SAX interface THIS INTERFACE IS STILL EXPERIMENTAL
  • cloneNode clones now within documents
  • more documentation

Documentation

The DOM Attribute Class
The DOM CDATASection Class
The DOM Comment Class
XML::LibXML DOM implementation
DOM Document Class
DOM L2 Implementation of a Document Fragment
A Class implementing Dtd Nodes
The DOM Element Class
A Namespace Class to hold namespace nodes
"virtual" Base Class DOM-Nodes
The DOM Text Node Class

Modules

Interface to the gnome libxml2 library
Boolean true/false values
Simple string values.
a list of XML document nodes
Simple numeric values.
XML::LibXML direct SAX parser
build a LibXML tree from SAX events
Generate SAX events from a LibXML tree
LibXML DOM based SAX Parser

Provides

in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in lib/XML/LibXML/SAX/Generator.pm
in LibXML.pm