Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 40: 2024-129d8ca6fc Critical: NekoHTML Type Confusion Issues

fedora
Calendar Grey March 7, 2024
Dist Fedora Esm H88
The Fedora 40 release features updates to nekohtml and important fixes for type confusion vulnerabilities aimed at enhancing security measures.
Change for system JDK from 17 to 21

Summary

NekoHTML is a simple HTML scanner and tag balancer that enables

application programmers to parse HTML documents and access the

information using standard XML interfaces. The parser can scan HTML

files and "fix up" many common mistakes that human (and computer)

authors make in writing HTML documents. NekoHTML adds missing parent

elements; automatically closes elements with optional end tags; and

can handle mismatched inline element tags.

NekoHTML is written using the Xerces Native Interface (XNI) that is

the foundation of the Xerces2 implementation. This enables you to use

the NekoHTML parser with existing XNI tools without modification or

rewriting code.

Update Information:

Change for system JDK from 17 to 21. upstream security release 122.0.6261.94 High CVE-2024-1938: Type Confusion in V8 High CVE-2024-1939: Type Confusion in V8 fixed bug with requires Automatic update for lucene-9.9.2-1.fc40. bump java source/target to 1.8, fixes 2266639

Topics%20covered

Topics Covered

security advisory update critical Fedora bug fix type confusion nekohtml

Change Log

* Sat Mar 2 2024 Jiri Vanek - 0:1.9.22-26 - Rebuilt for java-21-openjdk as system jdk

References


[ 1 ] Bug #2123726 - consoleImageViewer crashes at start https://bugzilla.redhat.com/show_bug.cgi?id=2123726 [ 2 ] Bug #2261062 - directory-maven-plugin: FTBFS in Fedora rawhide/f40 https://bugzilla.redhat.com/show_bug.cgi?id=2261062 [ 3 ] Bug #2266639 - directory-maven-plugin fails to build with java-21-openjdk https://bugzilla.redhat.com/show_bug.cgi?id=2266639 [ 4 ] Bug #2266934 - CVE-2024-1938 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266934 [ 5 ] Bug #2266937 - CVE-2024-1939 chromium: type confusion [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2266937 [ 6 ] Bug #2267486 - Include Java 21 as system Java Change in Fedora 40 Beta https://bugzilla.redhat.com/show_bug.cgi?id=2267486

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-129d8ca6fc' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: nekohtml
Product: Fedora 40
Version: 1.9.22
Release: 26.fc40
URL:
Summary: HTML scanner and tag balancer

Topics%20covered

Topics Covered

security advisory update critical Fedora bug fix type confusion nekohtml

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here