Wind River Support Network

HomeDefectsLIN1023-1802
Fixed

LIN1023-1802 : Security Advisory - python - CVE-2022-48565

Created: Aug 22, 2023    Updated: Sep 27, 2023
Resolved Date: Aug 30, 2023
Found In Version: 10.23.30.1
Fix Version: 10.23.30.1
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.

CREATE(Triage):(User=admin) CVE-2022-48565 (https://nvd.nist.gov/vuln/detail/CVE-2022-48565)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube