Hi,
as far as I can tell XML::Simple does not resolve external entities, so
wheezy is not affected by:
https://security-tracker.debian.org/tracker/TEMP-0842891-6227B6
Can somebody more knowledgeable in Perl than I am confirm this?
https://github.com/eserte/image-info/commit/781625b643bc05ba92127a4554de7910f3f2f8e6
Cheers,
-- Guido