[cross-project-issues-dev] CVE-2023-4218: XML External Entity issue in E

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[cross-project-issues-dev] CVE-2023-4218: XML External Entity issue in Eclipse IDE

From: Marta Rybczynska <marta.rybczynska@xxxxxxxxxxxxxxxxxxxxxx>
Date: Thu, 9 Nov 2023 10:47:26 +0100
Delivered-to: cross-project-issues-dev@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/cross-project-issues-dev/>
List-help: <mailto:cross-project-issues-dev-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/cross-project-issues-dev>, <mailto:cross-project-issues-dev-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/cross-project-issues-dev>, <mailto:cross-project-issues-dev-request@eclipse.org?subject=unsubscribe>

Dear all,

Today we have published CVE-2023-4218 affecting numerous projects inside the Eclipse IDE. There have been multiple fixes around the XML processing in affected modules and all fixes, according to our knowledge, are in 2023-09.

For more information follow: https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/8

Kind regards,

Marta Rybczynska

Technical Program Manager, Security Team, Eclipse Foundation

Prev by Date: [cross-project-issues-dev] Please raise your hands regarding P2 ant support
Next by Date: [cross-project-issues-dev] Opportunity for funded work - Migrate and refresh documentation on wiki.eclipse.org
Previous by thread: [cross-project-issues-dev] Please raise your hands regarding P2 ant support
Next by thread: [cross-project-issues-dev] Opportunity for funded work - Migrate and refresh documentation on wiki.eclipse.org
Index(es):
- Date
- Thread

Breadcrumbs