Linuxsecurity Critical XML Entity Vulnerabilities Fixed in Fedora 43 and 44 Updates
Article Content
- •Fedora 43 and 44 released critical updates for XMLStarlet on June 11, 2026.
- •The updates fix XML External Entity (XXE) vulnerabilities that could expose sensitive data.
- •Users are urged to apply the updates immediately using the 'dnf' update program.
On June 11, 2026, Fedora released updates for XMLStarlet in versions 43 and 44 to address XML External Entity (XXE) vulnerabilities. These vulnerabilities could allow attackers to exploit XML parsing features, potentially leading to unauthorized access to sensitive data. The updates were made available by Vitezslav Crhonek and are crucial for users of Fedora 43 and 44. Users are advised to upgrade using the 'dnf' update program. The vulnerabilities were identified in version 1.6.1-30 of XMLStarlet, which is a command-line toolkit for XML processing. The updates are essential for maintaining security and preventing potential exploitation. No specific CVEs were mentioned in the articles, but the nature of the vulnerabilities suggests a significant risk if left unpatched.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…