https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42317 Bug ID: 42317 Summary: [CVE-2014-1626] Require MARC::File::XML > 1.0.2 Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs@lists.koha-community.org Reporter: dcook@prosentient.com.au QA Contact: testopia@bugs.koha-community.org CVE-2014-1626 notes vulnerabilities in MARC::File::XML in versions less than 1.0.2. Looking at Koha's cpanfile we say that we require at least version 1.0.1, but that should be updated to 1.0.2 or even 1.0.5 since in practice only 1.0.5 is really available via CPAN or Debian repos. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.