Re: [Python-Dev] cpython (2.7): Issue 17538: Document XML vulnerabilties

2013-03-26 Thread Christian Heimes
Am 26.03.2013 19:41, schrieb Antoine Pitrou: > On Tue, 26 Mar 2013 17:53:39 +0100 (CET) > christian.heimes wrote: >> + >> +The XML processing modules are not secure against maliciously constructed >> data. >> +An attacker can abuse vulnerabilities for e.g. denial of service attacks, to >> +access

Re: [Python-Dev] cpython (2.7): Issue 17538: Document XML vulnerabilties

2013-03-26 Thread Donald Stufft
On Mar 26, 2013, at 2:41 PM, Antoine Pitrou wrote: > On Tue, 26 Mar 2013 17:53:39 +0100 (CET) > christian.heimes wrote: >> + >> +The XML processing modules are not secure against maliciously constructed >> data. >> +An attacker can abuse vulnerabilities for e.g. denial of service attacks, to >

Re: [Python-Dev] cpython (2.7): Issue 17538: Document XML vulnerabilties

2013-03-26 Thread Antoine Pitrou
On Tue, 26 Mar 2013 17:53:39 +0100 (CET) christian.heimes wrote: > + > +The XML processing modules are not secure against maliciously constructed > data. > +An attacker can abuse vulnerabilities for e.g. denial of service attacks, to > +access local files, to generate network connections to other