The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XMLTooling library all versions prior to V3.0.4, provided with the OpenSAML and Shibboleth Service Provider software, contains an XML parsing class. Invalid data in the XML declaration causes an exception of a type that was not handled properly in the parser class and propagates an unexpected exception type.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xmltooling | Mar 13, 2019 | Mar 13, 2019 |
| Suse | — | Upgrade libxmltooling9Upgrade libxmltooling-lite9Upgrade libxmltooling6Upgrade libxmltooling7Upgrade xmltooling-schemasUpgrade libxmltooling-devel | Apr 11, 2019 | Mar 26, 2019 |
| Ubuntu | — | Upgrade libxmltooling6v5Upgrade libxmltooling8Upgrade libxmltooling6Upgrade libxmltooling7 | Apr 3, 2019 | Mar 26, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub