Control: tag -1 pending Hello,
Bug #1142332 in lintian reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/lintian/lintian/-/commit/c3e0b56880702aff8b2030aa90ae24b9895bd871 ------------------------------------------------------------------------ XML parser: Disable external entity expansion. (Closes: #1142332) Avoid loading external entities, which can have questionable behavior when these entities reference local devices, such as /dev/urandom. Consider the following XML document: <?xml version="1.0" encoding="ISO-8859-1"?> <!DOCTYPE foo [<!ELEMENT foo ANY > <!ENTITY xxe SYSTEM "file:///dev/urandom" >]> <foo>&xxe;</foo> ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1142332
