Advisories » MGASA-2018-0431

Updated axis packages fix security vulnerability

Publication date: 03 Nov 2018
Modification date: 03 Nov 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-8032

Description

Updated axis packages fix security vulnerability:

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site
scripting (XSS) attack in the default servlet/services (CVE-2018-8032).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=23502
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/Q5PSL3445FAECTG4YYE7GBG6QIR75LAK/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8032

SRPMS

6/core

• axis-1.4-32.1.mga6