RHSA-2011:0858-01 -- Redhat xerces-j2ID: oval:org.secpod.oval:def:500062 | Date: (C)2012-01-31 (M)2024-02-19 |
Class: PATCH | Family: unix |
The xerces-j2 packages provide the Apache Xerces2 Java Parser, a high-performance XML parser. A Document Type Definition defines the legal syntax for certain types of files, such as XML files. A flaw was found in the way the Apache Xerces2 Java Parser processed the SYSTEM identifier in DTDs. A remote attacker could provide a specially-crafted XML file, which once parsed by an application using the Apache Xerces2 Java Parser, would lead to a denial of service . Users should upgrade to these updated packages, which contain a backported patch to correct this issue. Applications using the Apache Xerces2 Java Parser must be restarted for this update to take effect.
Platform: |
Red Hat Enterprise Linux 6 |