Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-28168: Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | fop | 0:1.1-6.amzn2.0.1 |
Vulnerabilities 1
-
High 7.5
Apache XML Graphics FOP: XML External Entity (XXE) Processing
Improper Restriction of XML External Entity Reference ('XXE') vulnerability in Apache XML Graphics FOP. This issue affects Apache XML Graphics FOP: 2.9. Users are recommended to upgrade to version 2.10, which fixes the issue.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2024-28168.html