libxml2 在 2.11.9、2.12.9 和 2.13.3 之前的版本中存在一个安全漏洞,SAX 解析器在自定义 SAX 处理程序尝试通过设置 "checked" 来覆盖实体内容时,仍然会为外部实体生成事件。这使得经典的 XXE(XML 外部实体注入)攻击成为可能。 该漏洞已在后续版本中修复,建议用户尽快升级到最新版本以避免潜在的安全风险。 参考链接: - [GitHub 安全公告](https://github.com/advisories/GHSA-6c2p-rqx3-w4px) - [NVD 漏洞详情](https://nvd.nist.gov/vuln/detail/CVE-2024-40896) - [libxml2 修复提交](https://gitlab.gnome.org/GNOME/libxml2/-/commit/1a8932303969907f6572b1b6aac4081c56adb5c6) - [libxml2 问题报告](https://gitlab.gnome.org/GNOME/libxml2/-/issues/761) #安全漏洞#XXE#libxml2#SAX解析器 #AIGC
✅Telegram 8.8 versiyaga yangilandi 700 million foydalanuvchilar va Telegram Premium Telegram Premium • Va'da qilinganidek, Pulli funksiyalar yangi versiyada mavjud. Batafsil ← • AppStore-da Rossiya uchun narx, avval aytib o'tilganidek, oyiga 449 rublni tashkil etdi. • O'zbekiston uchun narx xozircha nomalum. Guruhga qo'shilish so'rovlari • Ommaviy guruh administratorlari endi qo‘shilish so‘rovini yoqishlari mumkin. • Guruhga kirishdan oldin foydalanuvchi "Ariza yuborish" tugmasini ko'radi - misol. • Funksiyani yoqish uchun siz Guruh profili boʻlimiga oʻtishingiz > “Tahrirlash” ni tanlashingiz > “Guruh turi” tugmasini bosishingiz > soʻng “Kim xabar yuborishi mumkin?” > "Faqat a'zolar" ni tanlang > va qo'shilish uchun arizalarni yoqing. Yaxshilangan "galochka" • Kanal, guruh yoki bot autentifikatsiyasini tasdiqlovchi ko‘k belgi endi chatning o‘zi ochilganda ham ko‘rsatiladi – misol. Yaxshilangan botlar • Dasturchilar endi rasm yoki videoni "Ushbu bot nima qila oladi" bo'limiga qo'shishlari mumkin - misol. Boshqa yangiliklar • Suhbatni oldindan ko‘rish yaxshilandi. Endi Android Telegram’da iOS’dagi kabi yozishmalar bo‘ylab harakatlanishingiz mumkin. • Androidda qo'shimcha ikonkalar. • Galereyaga rasm va videolarni suxbat turlari bo'yicha avtomatik saqlash funksiyasi qoʻshildi. • Fayllarni iOSda uchinchi tomon ilovalaridan jo‘natishda endi animatsion yuklab olish paneli ko‘rinadi. ▫️ Emojilar, stikerlar va fon rasmlari bilan animatsion avatar tuzuvchi (hozircha faqat macOS uchun). ▫️ Telegram’ning mobil va kompyuter versiyalari uchun 100 dan ortiq tuzatishlar va yaxshilanishlar: iOS’da yaxshilangan animatsiya silliqligi, Android qo‘ng‘iroqlari sifati. Bu yangilanish haqida batafsil: 👉🏻 VIDEO | 👉🏻 MAQOLA 📲PlayStore | 📲AppStore |📂APK #telegram#tgram 💚@TGraphUz | YouTube
2개의 유사한 게시물이 발견되었습니다
검색: #libxml2
@djangoproject · Post #551 · 2018. 01. 23. PM 04:28
http://lxml.de/ #lxml is the most feature-rich and easy-to-use library for processing #XML and #HTML in the Python language. The lxml XML toolkit is a Pythonic binding for the #C libraries #libxml2 and #libxslt. It is unique in that it combines the speed and XML feature completeness of these libraries with the simplicity of a native Python #API, mostly compatible but superior to the well-known ElementTree API. The latest release works with all #CPython versions from 2.6 to 3.6. See the introduction for more information about background and goals of the lxml project. Some common questions are answered in the FAQ.