SOAP-Lite 0.55
Security Advisories
CVE-2015-8978
An example attack consists of defining 10 or more XML entities, each defined as consisting of 10 of the previous entity, with the document consisting of a single instance of the largest entity, which expands to one billion copies of the first entity. The amount of computer memory used for handling an external SOAP call would likely exceed that available to the process parsing the XML.
- https://www.securityfocus.com/bid/94487
- https://github.com/redhotpenguin/perl-soaplite/commit/6942fe0d281be1c32c5117605f9c4e8d44f51124
Fixed version: >=1.15
Reported: 2015-07-21
Kwalitee Issues
- has_meta_yml
-
Add a META.yml to the distribution. Your buildtool should be able to autogenerate it.
- prereq_matches_use
-
List all used modules in META.yml requires
Error:
- MIME::Lite
- MQSeries
- MQSeries::Message
- MQSeries::Queue
- MQSeries::QueueManager
- Net::Jabber
- URI
- URI::Escape
- has_meta_json
-
Add a META.json to the distribution. Your buildtool should be able to autogenerate it.
- meta_yml_has_license
-
Define the license if you are using in Build.PL. If you are using MakeMaker (Makefile.PL) you should upgrade to ExtUtils::MakeMaker version 6.31.
- use_warnings
-
Add 'use warnings' (or its equivalents) to all modules, or convince us that your favorite module is well-known enough and people can easily see the modules warn when something bad happens.
Error: Apache::SOAP, Apache::XMLRPC::Lite, IO::SessionData, IO::SessionSet, SOAP::Lite, SOAP::Test, SOAP::Transport::FTP, SOAP::Transport::HTTP, SOAP::Transport::IO, SOAP::Transport::JABBER, SOAP::Transport::LOCAL, SOAP::Transport::MAILTO, SOAP::Transport::MQ, SOAP::Transport::POP3, SOAP::Transport::TCP, UDDI::Lite, XML::Parser::Lite, XMLRPC::Lite, XMLRPC::Test, XMLRPC::Transport::HTTP, XMLRPC::Transport::POP3, XMLRPC::Transport::TCP
- no_unauthorized_packages
-
Ask the owner of the distribution (the one who released it first, or the one who is designated in x_authority) to give you a (co-)maintainer's permission.
Error:
- LWP::Protocol
- consistent_version
-
Split the distribution, or fix the version numbers to make them consistent (use the highest version number to avoid version downgrade).
Error: 0.55,1.02
- has_separate_license_file
-
This is not a critical issue. Currently mainly informative for the CPANTS authors. It might be removed later.
Modules
Name | Abstract | Version | View |
---|---|---|---|
Apache::SOAP | mod_perl-based SOAP server with minimum configuration | 0.55 | metacpan |
Apache::XMLRPC::Lite | mod_perl-based XML-RPC server with minimum configuration | 0.55 | metacpan |
IO::SessionData | 1.02 | metacpan | |
IO::SessionSet | metacpan | ||
SOAP::Lite | Client and server side SOAP implementation | 0.55 | metacpan |
SOAP::Test | Test framework for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::FTP | Client side FTP support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::HTTP | Server/Client side HTTP support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::IO | Server side IO support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::JABBER | Server/Client side JABBER support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::LOCAL | Client side no-transport support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::MAILTO | Client side SMTP/sendmail support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::MQ | Server/Client side MQ support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::POP3 | Server side POP3 support for SOAP::Lite | 0.55 | metacpan |
SOAP::Transport::TCP | Server/Client side TCP support for SOAP::Lite | 0.55 | metacpan |
UDDI::Lite | Library for UDDI clients in Perl | 0.55 | metacpan |
XML::Parser::Lite | Lightweight regexp-based XML parser | 0.55 | metacpan |
XMLRPC::Lite | client and server implementation of XML-RPC protocol | 0.55 | metacpan |
XMLRPC::Test | Test framework for XMLRPC::Lite | 0.55 | metacpan |
XMLRPC::Transport::HTTP | Server/Client side HTTP support for XMLRPC::Lite | 0.55 | metacpan |
XMLRPC::Transport::POP3 | Server side POP3 support for XMLRPC::Lite | 0.55 | metacpan |
XMLRPC::Transport::TCP | Server/Client side TCP support for XMLRPC::Lite | 0.55 | metacpan |
Provides
Name | File | View |
---|---|---|
LWP::Protocol | lib/SOAP/Transport/HTTP.pm | metacpan |
My::PingPong | lib/SOAP/Test.pm | metacpan |
SOAP | lib/SOAP/Lite.pm | metacpan |
SOAP::Client | lib/SOAP/Lite.pm | metacpan |
SOAP::Cloneable | lib/SOAP/Lite.pm | metacpan |
SOAP::Constants | lib/SOAP/Lite.pm | metacpan |
SOAP::Custom::XML::Data | lib/SOAP/Lite.pm | metacpan |
SOAP::Custom::XML::Deserializer | lib/SOAP/Lite.pm | metacpan |
SOAP::Data | lib/SOAP/Lite.pm | metacpan |
SOAP::Deserializer | lib/SOAP/Lite.pm | metacpan |
SOAP::Fault | lib/SOAP/Lite.pm | metacpan |
SOAP::Header | lib/SOAP/Lite.pm | metacpan |
SOAP::Lite::COM | lib/SOAP/Lite.pm | metacpan |
SOAP::MIMEParser | lib/SOAP/Lite.pm | metacpan |
SOAP::Parser | lib/SOAP/Lite.pm | metacpan |
SOAP::SOM | lib/SOAP/Lite.pm | metacpan |
SOAP::Schema | lib/SOAP/Lite.pm | metacpan |
SOAP::Schema::Deserializer | lib/SOAP/Lite.pm | metacpan |
SOAP::Schema::WSDL | lib/SOAP/Lite.pm | metacpan |
SOAP::Serializer | lib/SOAP/Lite.pm | metacpan |
SOAP::Server | lib/SOAP/Lite.pm | metacpan |
SOAP::Server::Object | lib/SOAP/Lite.pm | metacpan |
SOAP::Server::Parameters | lib/SOAP/Lite.pm | metacpan |
SOAP::Test::Server | lib/SOAP/Test.pm | metacpan |
SOAP::Trace | lib/SOAP/Lite.pm | metacpan |
SOAP::Transport | lib/SOAP/Lite.pm | metacpan |
SOAP::Transport::FTP::Client | lib/SOAP/Transport/FTP.pm | metacpan |
SOAP::Transport::HTTP::Apache | lib/SOAP/Transport/HTTP.pm | metacpan |
SOAP::Transport::HTTP::CGI | lib/SOAP/Transport/HTTP.pm | metacpan |
SOAP::Transport::HTTP::Client | lib/SOAP/Transport/HTTP.pm | metacpan |
SOAP::Transport::HTTP::Daemon | lib/SOAP/Transport/HTTP.pm | metacpan |
SOAP::Transport::HTTP::FCGI | lib/SOAP/Transport/HTTP.pm | metacpan |
SOAP::Transport::HTTP::Server | lib/SOAP/Transport/HTTP.pm | metacpan |
SOAP::Transport::IO::Server | lib/SOAP/Transport/IO.pm | metacpan |
SOAP::Transport::JABBER::Client | lib/SOAP/Transport/JABBER.pm | metacpan |
SOAP::Transport::JABBER::Query | lib/SOAP/Transport/JABBER.pm | metacpan |
SOAP::Transport::JABBER::Server | lib/SOAP/Transport/JABBER.pm | metacpan |
SOAP::Transport::LOCAL::Client | lib/SOAP/Transport/LOCAL.pm | metacpan |
SOAP::Transport::MAILTO::Client | lib/SOAP/Transport/MAILTO.pm | metacpan |
SOAP::Transport::MQ::Client | lib/SOAP/Transport/MQ.pm | metacpan |
SOAP::Transport::MQ::Server | lib/SOAP/Transport/MQ.pm | metacpan |
SOAP::Transport::POP3::Server | lib/SOAP/Transport/POP3.pm | metacpan |
SOAP::Transport::TCP::Client | lib/SOAP/Transport/TCP.pm | metacpan |
SOAP::Transport::TCP::Server | lib/SOAP/Transport/TCP.pm | metacpan |
SOAP::Utils | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchema1999::Deserializer | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchema1999::Serializer | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchema2001::Deserializer | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchema2001::Serializer | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchema::Serializer | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchemaApacheSOAP::Deserializer | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchemaSOAP1_1::Deserializer | lib/SOAP/Lite.pm | metacpan |
SOAP::XMLSchemaSOAP1_2::Deserializer | lib/SOAP/Lite.pm | metacpan |
UDDI::Data | lib/UDDI/Lite.pm | metacpan |
UDDI::Deserializer | lib/UDDI/Lite.pm | metacpan |
UDDI::SOM | lib/UDDI/Lite.pm | metacpan |
UDDI::Serializer | lib/UDDI/Lite.pm | metacpan |
URI::jabber | lib/SOAP/Transport/JABBER.pm | metacpan |
URI::mq | lib/SOAP/Transport/MQ.pm | metacpan |
URI::tcp | lib/SOAP/Transport/TCP.pm | metacpan |
XMLRPC | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::Constants | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::Data | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::Deserializer | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::SOM | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::Serializer | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::Server | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::Server::Parameters | lib/XMLRPC/Lite.pm | metacpan |
XMLRPC::Test::Server | lib/XMLRPC/Test.pm | metacpan |
XMLRPC::Transport::HTTP::Apache | lib/XMLRPC/Transport/HTTP.pm | metacpan |
XMLRPC::Transport::HTTP::CGI | lib/XMLRPC/Transport/HTTP.pm | metacpan |
XMLRPC::Transport::HTTP::Daemon | lib/XMLRPC/Transport/HTTP.pm | metacpan |
XMLRPC::Transport::POP3::Server | lib/XMLRPC/Transport/POP3.pm | metacpan |
XMLRPC::Transport::TCP::Server | lib/XMLRPC/Transport/TCP.pm | metacpan |