Conraid's Repository

for Slackware

 NameLast modifiedSize

 Parent Directory  -
 README2018-09-02 11:31 816
 defusedxml-0.5.0-x86_64-1cf.lst2018-09-02 11:35 7.5K
 defusedxml-0.5.0-x86_64-1cf.meta2018-11-14 08:36 1.0K
 defusedxml-0.5.0-x86_64-1cf.txt2018-09-02 11:35 718
 defusedxml-0.5.0-x86_64-1cf.txz2018-09-02 11:31 35K
 defusedxml-0.5.0-x86_64-1cf.txz.asc2018-09-02 11:35 512
 defusedxml-0.5.0-x86_64-1cf.txz.md52018-09-02 11:35 66

Slackware Current Repository by Conraid


defusedxml (XML bomb protection for Python stdlib modules)

The results of an attack on a vulnerable XML library can be fairly
dramatic.  With just a few hundred Bytes of XML data an attacker can
occupy several Gigabytes of memory within seconds.  An attacker can
also keep CPUs busy for a long time with a small to medium size
request.  Under some circumstances it is even possible to access local
files on your server, to circumvent a firewall, or to abuse services
to rebound attacks to third parties.  This library allows for XML to
be parsed in a manner that avoids these pitfalls.