Fedora 40: 2024-129d8ca6fc High Severity: mxparser Type Confusion
fedora
March 7, 2024
Change for system JDK from 17 to 21
Summary
MXParser is a fork of xpp3_min 1.1.7 containing only the parser with merged
changes of the Plexus fork. It is an implementation of the XMLPULL V1 API
(parser only).
Update Information:
Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639
Topics Covered
Change Log
* Sat Mar 2 2024 Jiri Vanek
References
[ 1 ] Bug #2123726 - consoleImageViewer crashes at start
https://bugzilla.redhat.com/show_bug.cgi?id=2123726
[ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40
https://bugzilla.redhat.com/show_bug.cgi?id=2261062
[ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk
https://bugzilla.redhat.com/show_bug.cgi?id=2266639
[ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266934
[ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=2266937
[ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta
https://bugzilla.redhat.com/show_bug.cgi?id=2267486
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Name: mxparser
Product: Fedora 40
Version: 1.2.2
Release: 10.fc40
Summary: Parser of xpp3_min 1.1.7 with merged changes of the Plexus fork
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!