Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 37: FEDORA-2023-1332ed94a7 Critical: Mingw Xerces-C Integer Overflow

fedora
Calendar Grey October 23, 2023
Dist Fedora Esm H88
The recent update of mingw-xerces-c-3.2.4 enhances XML parsing performance and resolves integer overflow issues, contributing to better functionality in Fedora 37.
Update to xerces-c-3.2.4, fixes CVE-2023-37536.

Summary

Xerces-C is a validating XML parser written in a portable subset of

C++. Xerces-C makes it easy to give your application the ability to

read and write XML data. A shared library is provided for parsing,

generating, manipulating, and validating XML documents. Xerces-C is

faithful to the XML 1.0 recommendation and associated standards (DOM

1.0, DOM 2.0. SAX 1.0, SAX 2.0, Namespaces).

Update Information:

Update to xerces-c-3.2.4, fixes CVE-2023-37536.

Topics%20covered

Topics Covered

security advisory fedora integer overflow mingw xml parser

Change Log

References


[ 1 ] Bug #2243429 - mingw-xerces-c: xerces-c: integer overflow [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2243429

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-1332ed94a7' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: mingw-xerces-c
Product: Fedora 37
Version: 3.2.4
Release: 1.fc37
URL: https://xerces.apache.org/xerces-c/
Summary: MingGW Windows validating XML parser

Topics%20covered

Topics Covered

security advisory fedora integer overflow mingw xml parser

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here