Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2022:3876-1

Опубликовано: 04 нояб. 2022
Источник: suse-cvrf

Описание

Security update for xmlbeans

This update for xmlbeans fixes the following issues:

  • CVE-2021-23926: Fixed XML parsers not protecting from malicious XML input (bsc#1180915).

Список пакетов

SUSE Linux Enterprise Software Development Kit 12 SP5
xmlbeans-2.6.0-3.3.1
SUSE Linux Enterprise Workstation Extension 12 SP5
xmlbeans-2.6.0-3.3.1

Ссылки

Описание

The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

Затронутые продукты
SUSE Linux Enterprise Software Development Kit 12 SP5:xmlbeans-2.6.0-3.3.1
SUSE Linux Enterprise Workstation Extension 12 SP5:xmlbeans-2.6.0-3.3.1
Ссылки