MGASA-2021-0268

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2021-0268.html

Import Source

https://advisories.mageia.org/MGASA-2021-0268.json

JSON Data

https://api.osv.dev/v1/vulns/MGASA-2021-0268

Related

Published

2021-06-18T19:24:28Z

Modified

2021-06-18T18:21:52Z

Summary

Updated python-pikepdf packages fix security vulnerability

Details

models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries (CVE-2021-29421).

References

Credits

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.10.0-1.mga8

{
    "section": "core"
}