Commits

dirkbaechle  committed 4e1e166

- Fix for docbook Tool: we now have to explicitly request the resolving of
external entities when using the libxml2 binding. This is required after
the security issue fix described in http://www.ubuntu.com/usn/usn-2214-1/ and
people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-0191.html .

  • Participants
  • Parent commits 440f49f

Comments (0)

Files changed (1)

File src/engine/SCons/Tool/docbook/__init__.py

 
     styledoc = libxml2.parseFile(xsl_file)
     style = libxslt.parseStylesheetDoc(styledoc)
-    doc = libxml2.parseFile(str(node))
+    doc = libxml2.readFile(str(node), None, libxml2.XML_PARSE_NOENT)
     result = style.applyStylesheet(doc, None)
 
     depfiles = []
     Resolving XIncludes, using the libxml2 module.
     """
     doc = libxml2.readFile(str(source[0]), None, libxml2.XML_PARSE_NOENT)
-    doc.xincludeProcess()
+    doc.xincludeProcessFlags(libxml2.XML_PARSE_NOENT)
     doc.saveFile(str(target[0]))
     doc.freeDoc()