DLA-167-1 redcloth - security update

Bulletin has no description...

Apache Shindig 2.5.0 XXE Injection

CVE-2013-4295: XXE vulnerability In Apache Shindig 2.5.0 PHP Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Shindig PHP 2.5.0 Description: The gadget renderer in the PHP version of Apache Shindig is subject to an XML External Entity XXE Injection attack. The...

XML External Entity (XXE) issue

thanks to Kousuke Ebihara for the report and patch...

XML External Entity (XXE) issue

disable external XML entities and libxml errors thanks to Kousuke Ebihara for the report and patch...