Bug 11263

Summary:	Updated xmlgraphics-commons packages fix a security vulnerabilitys (CVE-2020-11988)
Product:	[ROSA-based products] ROSA Fresh	Reporter:	Zombie Ryushu <zombie.ryushu>
Component:	Contributed Packages	Assignee:	ROSA Linux Bugs <bugs>
Status:	CONFIRMED ---	QA Contact:	ROSA Linux Bugs <bugs>
Severity:	normal
Priority:	Normal	CC:	andrey.bondrov, denis.silakov, mc2374
Version:	KDE4
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://advisories.mageia.org/MGASA-2021-0144.html
Whiteboard:
Platform:	2016.1	ROSA Vulnerability identifier:	CVE-2020-11988
RPM Package:	xmlgraphics-commons-2.6-1.mga7	ISO-related:
Bad POT generating:		Upstream:

Description Zombie Ryushu 2021-03-22 05:29:56 MSK

The Apache XML Graphics Commons library is vulnerable to SSRF via the XMPParser
that allow an attacker to cause the underlying server to make arbitrary GET
requests (CVE-2020-11988).