Fedora 40: DecentXML High Type Confusion CVE-2024-1938 Advisory
fedora
March 7, 2024
Change for system JDK from 17 to 21
Summary
XML parser optimized for round-tripping and code reuse with main
features being:
* Allows 100% round-tripping, even for weird white-space between
attributes in the start tag or in the end tag
* Suitable for building editors and filters which want/need to
preserve the original file layout as much as possible
* Error messages have line and column information
* Easy to reuse individual components
* XML 1.1 compatible
Update Information:
Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639
Topics Covered
Change Log
* Sat Mar 2 2024 Jiri Vanek
References
[ 1 ] Bug #2123726 - consoleImageViewer crashes at start
https://bugzilla.redhat.com/show_bug.cgi?id=2123726
[ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40
https://bugzilla.redhat.com/show_bug.cgi?id=2261062
[ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk
https://bugzilla.redhat.com/show_bug.cgi?id=2266639
[ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266934
[ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266937
[ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta
https://bugzilla.redhat.com/show_bug.cgi?id=2267486
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Name: decentxml
Product: Fedora 40
Version: 1.4
Release: 35.fc40
URL: Summary : XML parser optimized for round-tripping and code reuse
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!