Hi,
Our tests started failing on Friday. We use EMANE 0.7.4.
Debugging showed that EMANE uses external parameters entities in the XML
files; specifically the DTD links (I believe). We were getting errors on
files that worked perfectly fine previously. The errors would be of the
following form:
validity error : No declaration for element param
validity error : No declaration for attribute name of element param
validity error : No declaration for attribute value of element param
libxml2 had a security update on Thursday:
libxml2 (2.7.8.dfsg-5.1ubuntu4.7) precise-security; urgency=medium
* SECURITY UPDATE: resource exhaustion via external parameter entities
- parser.c: do not fetch external parameter entities.
-https://git.gnome.org/browse/libxml2/commit/?id=9cd1c3cfbd32655d60572c0a413e017260c854df
- CVE-2014-0191
-- Marc Deslauriers <email address hidden> Thu, 08 May 2014 14:30:38 -0400
After downgrading libxml down to 2.7.8.dfsg-5.1ubuntu4.6 we noticed that
emanegentransportxml works fine again.
This behaviour should be fixed so that it works again with the latest
libxml2. I'll be happy to provide further information if needed.
Hasnain
_______________________________________________
emane-users mailing list
[email protected]
http://pf.itd.nrl.navy.mil/mailman/listinfo/emane-users
