Security Advisories (1)
CVE-2012-1102 (2021-07-09)

It was discovered that the XML::Atom Perl module before version 0.39 did not disable external entities when parsing XML from potentially untrusted sources. This may allow attackers to gain read access to otherwise protected resources, depending on how the library is used.

Changes for version 0.14

  • Fixed bug that it decodes binary data as UTF-8 octet (Thanks to Mahlon E. Smith)
  • Don't eat up STDIN in cgi-mode (Thanks to Bayle Shanks)

Changes for version 0.13_02

  • Now supports insert mode, by passing hash reference in add_entry $feed->add_entry($entry, { mode => 'insert' }); (Thanks to Dominic Mitchell)

Changes for version 0.13_01

  • Now supports creating version 1.0 feed by passing new(Version => 1.0)
  • Be more strict in utf-8 handling and base64ing (Thanks to Dave Rolsky)

Modules

Atom feed and API implementation
A client for the Atom API
Atom entry
Atom feed
Author or contributor object
A server for the Atom API
Utility functions

Provides

in lib/XML/Atom/Client.pm
in lib/XML/Atom/Content.pm
in lib/XML/Atom/ErrorHandler.pm
in lib/XML/Atom/Link.pm
in lib/XML/Atom.pm
in lib/XML/Atom/Thing.pm