Red Hat Security AdvisoryRHSA-2020:0702
xerces-c security update
Released 2020-03-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop Optional (v. 6) xerces-c-3.0.1-21.el6_10, xerces-c-devel-3.0.1-21.el6_10, xerces-c-doc-3.0.1-21.el6_10
- Red Hat Enterprise Linux HPC Node Optional (v. 6) xerces-c-3.0.1-21.el6_10, xerces-c-devel-3.0.1-21.el6_10, xerces-c-doc-3.0.1-21.el6_10
- Red Hat Enterprise Linux Server Optional (v. 6) xerces-c-3.0.1-21.el6_10, xerces-c-devel-3.0.1-21.el6_10, xerces-c-doc-3.0.1-21.el6_10
- Red Hat Enterprise Linux Workstation Optional (v. 6) xerces-c-3.0.1-21.el6_10, xerces-c-devel-3.0.1-21.el6_10, xerces-c-doc-3.0.1-21.el6_10
Fixes 1 record
Priority MEDIUM 47
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.09503 · Published 2019-12-18 · Partial fix CWE-416