franco.ricci@phys.uniroma1.it writes:
> I wrote the following function in Perl to make some operations with LLRP
> command in a RFID application:
> ----
> CREATE OR REPLACE FUNCTION llrp_command.llrpenc_bytea(xml)
> RETURNS bytea AS
> $BODY$
> use strict;
> use RFID::LLRP::Builder qw(encode_message);
I don't know anything about RFID::LLRP::Builder, but some quick googling
suggests that it accesses libxml2 under the hood. If so, and if it
relies on being able to fetch external entities, you're going to need to
use PG 9.2 to make this work. The fix for CVE-2012-3489 broke such
cases in earlier branches. Sorry about that, but the alternatives were
worse; and in any case, pre-9.2 versions never made any serious effort
to allow other uses of libxml2 inside the backend. It's mostly luck
that it worked for you before, I think.
regards, tom lane
