Red Hat Security AdvisoryRHSA-2020:0704
xerces-c security update
Released 2020-03-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client Optional (v. 7) xerces-c-3.1.1-10.el7_7, xerces-c-devel-3.1.1-10.el7_7, xerces-c-doc-3.1.1-10.el7_7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) xerces-c-3.1.1-10.el7_7, xerces-c-devel-3.1.1-10.el7_7, xerces-c-doc-3.1.1-10.el7_7
- Red Hat Enterprise Linux Server (v. 7) xerces-c-3.1.1-10.el7_7, xerces-c-3.1.1-10.el7_7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) xerces-c-devel-3.1.1-10.el7_7, xerces-c-devel-3.1.1-10.el7_7.ppc, xerces-c-doc-3.1.1-10.el7_7
- Red Hat Enterprise Linux Workstation (v. 7) xerces-c-3.1.1-10.el7_7
- Red Hat Enterprise Linux Workstation Optional (v. 7) xerces-c-devel-3.1.1-10.el7_7, xerces-c-doc-3.1.1-10.el7_7
Fixes 1 record
Priority MEDIUM 47
The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.09503 · Published 2019-12-18 · Partial fix CWE-416