Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Changes for version 0.11

  • Remove the default: namespace when converting to XML using as_xml (the earlier fix only fixed it when getting the contents of an entry using $entry->content).
  • UTF-8 data is no longer base64-encoded in XML::Atom::Content. Thanks to Tatsuhiko Miyagawa for the patch.
  • Added XML::Atom::Entry::getlist($ns, $element) to retrieve the values of an element that may appear multiple times in the entry (like dc:subject). Thanks to Tatsuhiko Miyagawa for the patch.
  • Added ability to set namespaced attributes in an XML::Atom::Link object. Thanks to Tatsuhiko Miyagawa for the patch.
  • XML::Atom::Entry::add_link($link) no longer clones $link if it's a XML::Atom::Link object. Thanks to Tatsuhiko Miyagawa for the patch.

Modules

Atom feed and API implementation
A client for the Atom API
Atom entry
Atom feed
Author or contributor object
A server for the Atom API
Utility functions

Provides

in lib/XML/Atom/Client.pm
in lib/XML/Atom/Content.pm
in lib/XML/Atom/ErrorHandler.pm
in lib/XML/Atom/Link.pm
in lib/XML/Atom.pm
in lib/XML/Atom/Thing.pm