OpenStack Compute (nova)

  1. Bug #1100282
  2. Comment #18

Comment 18 for bug 1100282

Revision history for this message
Thierry Carrez (ttx) wrote : Re: DoS through XML entity expansion

Joshua Harlow independently reported the Nova issue on another bug, and had a proposed way of fixing it:

" Possibly fixed by simply adjusting the following: http://docs.python.org/2/library/pyexpat.html?highlight=xml.parsers#xml.parsers.expat.xmlparser.SetParamEntityParsing "