Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found 1 articles for you...
89
security advisoryfedoraDoSFedora 39: FEDORA-2024-d5ea2b345 critical: libxml DoS Vulnerabilities
Bugfix release. Includes security fixes for CVE-2021-42260 and CVE-2023-34194 and a fix for incorrect text element encoding (upstream isssue #51).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-c9dc0ac419 2024-01-12 00:59:08.472906 -------------------------------------------------------------------------------- Name : tinyxml Product : Fedora 38 Version : 2.6.2 Release : 28.fc38 URL : Summary : A simple, small, C++ XML parser Description : TinyXML is a simple, small, C++ XML parser that can be easily integrating into other programs. Have you ever found yourself writing a text file parser every time you needed to save human readable data or serialize objects? TinyXML solves the text I/O file once and for all. (Or, as a friend said, ends the Just Another Text File Parser problem.) -------------------------------------------------------------------------------- Update Information: Bugfix release. Includes security fixes for CVE-2021-42260 and CVE-2023-34194 and a fix for incorrect text element encoding (upstream isssue #51). -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 3 2024 Dominik Mierzejewski - 2.6.2-28 - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718) - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462 (rhbz#2254376, rhbz#2254381) - fix incorrect text element encoding (upstream isssue #51) - compile and run tests * Sat Jul 22 2023 Fedora Release Engineering - 2.6.2-27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2253716 - CVE-2021-42260 tinyxml: infinite loop causes crash https://bugzilla.redhat.com/show_bug.cgi?id=2253716 [ 2 ] Bug #2254376 - CVE-2023-34194 tinyxml: reachable assertion may lead to denial ofservice https://bugzilla.redhat.com/show_bug.cgi?id=2254376 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-c9dc0ac419' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jan 12, 2024
•Critical
Fedora
89
security advisoryfedoracriticalFedora 39: 2024-80e6578a01 Critical: tinyxml DoS Issues Fixed
Bugfix release. Includes security fixes for CVE-2021-42260 and CVE-2023-34194 and a fix for incorrect text element encoding (upstream isssue #51).. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-80e6578a01 2024-01-08 01:23:05.713168 -------------------------------------------------------------------------------- Name : tinyxml Product : Fedora 39 Version : 2.6.2 Release : 28.fc39 URL : Summary : A simple, small, C++ XML parser Description : TinyXML is a simple, small, C++ XML parser that can be easily integrating into other programs. Have you ever found yourself writing a text file parser every time you needed to save human readable data or serialize objects? TinyXML solves the text I/O file once and for all. (Or, as a friend said, ends the Just Another Text File Parser problem.) -------------------------------------------------------------------------------- Update Information: Bugfix release. Includes security fixes for CVE-2021-42260 and CVE-2023-34194 and a fix for incorrect text element encoding (upstream isssue #51). -------------------------------------------------------------------------------- ChangeLog: * Wed Jan 3 2024 Dominik Mierzejewski - 2.6.2-28 - apply Debian patch to fix CVE-2021-42260 (rhbz#2253716, rhbz#2253718) - apply Debian patch to fix CVE-2023-34194 and its duplicate, CVE-2023-40462 (rhbz#2254376, rhbz#2254381) - fix incorrect text element encoding (upstream isssue #51) - compile and run tests -------------------------------------------------------------------------------- References: [ 1 ] Bug #2253716 - CVE-2021-42260 tinyxml: infinite loop causes crash https://bugzilla.redhat.com/show_bug.cgi?id=2253716 [ 2 ] Bug #2254376 - CVE-2023-34194 tinyxml: reachable assertion may lead to denial of service https://bugzilla.redhat.com/show_bug.cgi?id=2254376 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-80e6578a01' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jan 08, 2024
•Critical
Fedora
197
security advisorydenial of servicecriticalDebian 10 Buster: DLA-3701-1 Critical: tinyxml DoS Threat
A reachable assertion issue has been discovered in tinyxml, a C++ XML parsing library, which could lead to denial of service via a crafted XML document with a '\0' located after whitespace. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3701-1
Dec 30, 2023
•Critical
Debian LTS
202
security advisorymoderateDoSopenSUSE 15.5 Security Advisory 2023:4958-1 Moderate: tinyxml DoS
This update for tinyxml fixes the following issues: CVE-2023-34194: Fixed reachable assertion may lead to denial of service (bsc#1218040).. # Security update for tinyxml Announcement ID: SUSE-SU-2023:4958-1 Rating: moderate References: * bsc#1218040 Cross-References: * CVE-2023-34194 CVSS scores: * CVE-2023-34194 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-34194 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tinyxml fixes the following issues: * CVE-2023-34194: Fixed reachable assertion may lead to denial of service (bsc#1218040). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4958=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4958=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4958=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 *tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-34194.html * https://bugzilla.suse.com/show_bug.cgi?id=1218040 . Upgrade for tinyxml tackling CVE-2023-34194 rated as moderate. Make sure your openSUSE installations are protected and current.. openSUSE Security,tinyxml update,DoS correction,software patch. . LinuxSecurity.com Team
Dec 22, 2023
OpenSUSE
100
security advisorydenial of servicemoderate severityopenSUSE: 2023:4958-1 moderate: tinyxml denial of service
* bsc#1218040 Cross-References: * CVE-2023-34194 . # Security update for tinyxml Announcement ID: SUSE-SU-2023:4958-1 Rating: moderate References: * bsc#1218040 Cross-References: * CVE-2023-34194 CVSS scores: * CVE-2023-34194 ( SUSE ): 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L * CVE-2023-34194 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.4 * openSUSE Leap 15.5 * SUSE Linux Enterprise Desktop 15 SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Package Hub 15 15-SP5 An update that solves one vulnerability can now be installed. ## Description: This update for tinyxml fixes the following issues: * CVE-2023-34194: Fixed reachable assertion may lead to denial of service (bsc#1218040). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2023-4958=1 * SUSE Package Hub 15 15-SP5 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4958=1 * openSUSE Leap 15.4 zypper in -t patch openSUSE-SLE-15.4-2023-4958=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 * SUSE Package Hub 15 15-SP5 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 * openSUSELeap 15.4 (aarch64 ppc64le s390x x86_64) * libtinyxml0-2.6.2-150000.3.6.1 * libtinyxml0-debuginfo-2.6.2-150000.3.6.1 * tinyxml-devel-2.6.2-150000.3.6.1 * tinyxml-debugsource-2.6.2-150000.3.6.1 * tinyxml-docs-2.6.2-150000.3.6.1 ## References: * https://www.suse.com/security/cve/CVE-2023-34194.html * https://bugzilla.suse.com/show_bug.cgi?id=1218040 . An update for tinyxml addresses a significant denial of service issue, with detailed setup guidelines provided.. SUSE Security Advisory, Tinyxml Denial Service, OpenSUSE Patch. . LinuxSecurity.com Team
Dec 22, 2023
SuSE
197
security advisorydenial of servicesoftware updateDebian 10 Buster DLA-3130-1: Tinyxml Denial Of Service Advisory
An issue has been found in tinyxml, a C++ XML parsing library. Crafted XML messages could lead to an infinite loop in TiXmlParsingData::Stamp(), which results in a denial of service. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3130-1
Sep 30, 2022
•Critical
Debian LTS
197
security advisorydenial of servicedebianDebian 9: DLA-2990-1 Moderate: Libxml2 Denial Of Service
An issue has been found in tinyxml, a C++ XML parsing library. Crafted XML messages could lead to an infinite loop in . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2988-1
Apr 30, 2022
•Important
Debian LTS
203
security advisorydenial of servicesoftware updateMageia 8: MGASA-2021-0514 Critical Advisory on TinyXML DoS Vulnerability
TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service. (CVE-2021-42260) References: . MGASA-2021-0514 - Updated tinyxml packages fix security vulnerability Publication date: 18 Nov 2021 URL: https://advisories.mageia.org/MGASA-2021-0514.html Type: security Affected Mageia releases: 8 CVE: CVE-2021-42260 TinyXML through 2.6.2 has an infinite loop in TiXmlParsingData::Stamp in tinyxmlparser.cpp via the TIXML_UTF_LEAD_0 case. It can be triggered by a crafted XML message and leads to a denial of service. (CVE-2021-42260) References: - https://bugs.mageia.org/show_bug.cgi?id=29642 - - https://www.cve.org/CVERecord?id=CVE-2021-42260 SRPMS: - 8/core/tinyxml-2.6.2-12.1.mga8 . Mageia 2021-0514 implements an update for TinyXML addressing a denial of service risk initiated by specially designed XML inputs.. TinyXML Security Update, Mageia 8, DoS Vulnerability, Software Patching, XML Parsing Error. . Severity: Critical. LinuxSecurity.com Team
Nov 18, 2021
•Critical
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!