Fedora alert FEDORA-2026-dbf44e0b72 (xmlstarlet)

From:
             
 
updates--- via package-announce <package-announce@lists.fedoraproject.org>
To:
             
 
package-announce@lists.fedoraproject.org
Subject:
             
 
[SECURITY] Fedora 44 Update: xmlstarlet-1.6.1-30.fc44
Date:
             
 
Thu, 11 Jun 2026 00:56:17 +0000
Message-ID:
             
 
<20260611005617.543527F058@bastion01.rdu3.fedoraproject.org>
Archive-link:
             
 
Article
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2026-dbf44e0b72
2026-06-11 00:54:51.286484+00:00
--------------------------------------------------------------------------------

Name        : xmlstarlet
Product     : Fedora 44
Version     : 1.6.1
Release     : 30.fc44
URL         : http://xmlstar.sourceforge.net/
Summary     : Command Line XML Toolkit
Description :
XMLStarlet is a set of command line utilities which can be used
to transform, query, validate, and edit XML documents and files
using simple set of shell commands in similar way it is done for
plain text files using UNIX grep, sed, awk, diff, patch, join, etc
commands.

--------------------------------------------------------------------------------
Update Information:

Fixes XML external entity vulnerability. For more information, refer to
https://src.fedoraproject.org/rpms/xmlstarlet/pull-request/4.
--------------------------------------------------------------------------------
ChangeLog:

* Wed May 27 2026 Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.1-30
- Fix XXE (XML External Entity) vulnerability
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2026-dbf44e0b72' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond...
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/package-ann...
Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new