[Bug 1090976] CVE-2014-0191 libxml2: external parameter entity loaded when entity substitution is disabled

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1090976

Vincent Danen  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|impact=moderate,public=2014 |impact=moderate,public=2014
                   |0506,reported=20140417,sour |0506,reported=20140417,sour
                   |ce=redhat,cvss2=4.3/AV:N/AC |ce=redhat,cvss2=4.3/AV:N/AC
                   |:M/Au:N/C:N/I:N/A:P,rhel-5/ |:M/Au:N/C:N/I:N/A:P,rhel-5/
                   |libxml2=defer,rhel-6/libxml |libxml2=defer,rhel-6/libxml
                   |2=affected,rhel-7/libxml2=a |2=notaffected,rhel-7/libxml
                   |ffected,rhel-6/mingw32-libx |2=affected,rhel-6/mingw32-l
                   |ml2=wontfix,fedora-all/libx |ibxml2=wontfix,fedora-all/l
                   |ml2=affected,fedora-all/min |ibxml2=affected,fedora-all/
                   |gw-libxml2=affected,epel-7/ |mingw-libxml2=affected,epel
                   |mingw-libxml2=affected,cwe= |-7/mingw-libxml2=affected,c
                   |CWE-611                     |we=CWE-611