Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

Debian DSA-3606-1 Critical: Libpdfbox XML External Entity Fix

debian
Calendar Grey June 24, 2016
Debian Logo
The Debian update DSA-3645-1 resolves a vulnerability in the libxml2 library, which may expose users to XML External Entity attacks. Users are advised to upgrade promptly.
It was discovered that pdfbox, a PDF library for Java, was susceptible to XML External Entity attacks

Summary

It was discovered that pdfbox, a PDF library for Java, was susceptible
to XML External Entity attacks.

For the stable distribution (jessie), this problem has been fixed in
version 1:1.8.7+dfsg-1+deb8u1.

For the testing distribution (stretch), this problem has been fixed
in version 1:1.8.12-1.

For the unstable distribution (sid), this problem has been fixed in
version 1:1.8.12-1.

We recommend that you upgrade your libpdfbox-java packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libpdfbox-java
CVE ID: CVE-2016-2175

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here