High ELSA-2020-0704 1 CVE

Important: xerces-c security update (Oracle Linux 7)

Published Mar 6, 2020 · Updated Mar 6, 2020

Ecosystem: Oracle Linux

Summary

[3.1.1-10]
- add security fix for CVE-2018-1311

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	xerces-c	0:3.1.1-10.el7_7
Oracle Linux · 7	xerces-c-devel	0:3.1.1-10.el7_7
Oracle Linux · 7	xerces-c-doc	0:3.1.1-10.el7_7

Vulnerabilities 1

Unscored —

CVE-2018-1311 Public exploit

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external…

Apache Software Foundation Apache Xerces C++ xerces-c xerces-c Debian Ubuntu Alpine

Dec 18, 2019