Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Debian 10 Buster DLA-3464-1 Moderate: Xmltooling SSRF Issue Resolved

debian lts
Calendar Grey June 21, 2023
Dist Debian Esm H88
Debian LTS addresses a vulnerability concerning server-side request forgery in xmltooling. It is advised to update to version 3.0.4-1+deb10u2 to ensure security.
Jurien de Jong discovered that the parsing of KeyInfo elements within the XMLTooling library may result in server-side request forgery
Topics%20covered

Topics Covered

security advisory moderate debian server-side request forgery xmltooling

Summary

We recommend that you upgrade your xmltooling packages.

For the detailed security status of xmltooling please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/xmltooling

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


-------------------------------------------------------------------------Package: xmltooling
Version: 3.0.4-1+deb10u2
Debian Bug: 1037948
CVE ID: not yet available

Topics%20covered

Topics Covered

security advisory moderate debian server-side request forgery xmltooling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here