Security Advisories (2)
CVE-2015-3451 (2015-04-23)

The _clone function does not properly set the expand_entities option, which allows remote attackers to conduct XML external entity (XXE) attacks via crafted XML data to the (1) new or (2) load_xml function.

CVE-2017-10672 (2015-04-23)

Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the arguments to a replaceChild call.

Changes for version 1.56

  • added line number interface (thanks to Peter Haworth)
  • patch to make perl 5.8.1 and XML::LibXML work together (thanks to François Pons)
  • added getElementById to XML::LibXML::Document (thanks to Robin Berjon)
  • fixes symbol problem with versions of libxml2 compiled without thread support (reported by Randal L. Schwartz)
  • tiny code clean ups
  • corrected tested versions after a local setup problem

Documentation

XML::LibXML Attribute Class
XML::LibXML Class for CDATA Sections
XML::LibXML Comment Class
XML::LibXML DOM Implementation
XML::LibXML DOM Document Class
XML::LibXML's DOM L2 Document Fragment Implementation
XML::LibXML DTD Handling
XML::LibXML Class for Element Nodes
XML::LibXML Namespace Implementation
Abstract Base Class of XML::LibXML Nodes
XML::LibXML Processing Instructions
Parsing XML Data with XML::LibXML
XML::LibXML Class for Text Nodes

Modules

Perl Binding for libxml2
Boolean true/false values
Simple string values.
a list of XML document nodes
Simple numeric values.
XML::LibXML direct SAX parser
Building DOM trees from SAX events.
Generate SAX events from a LibXML tree

Provides

in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in LibXML.pm
in lib/XML/LibXML/SAX/Generator.pm
in lib/XML/LibXML/SAX/Parser.pm
in LibXML.pm