CVE-2019-9628

Priority
Description
The XMLTooling library all versions prior to V3.0.4, provided with the
OpenSAML and Shibboleth Service Provider software, contains an XML parsing
class. Invalid data in the XML declaration causes an exception of a type
that was not handled properly in the parser class and propagates an
unexpected exception type.
Notes
Package
Upstream:released (3.0.4-1)
Ubuntu 18.04 LTS:released (1.6.4-1ubuntu2.1)
Ubuntu 14.04 ESM:DNE (trusty was released [1.5.3-2+deb8u3ubuntu0.1])
Patches:
More Information

Updated: 2022-06-10 14:03:15 UTC (commit 22cd97abab61e5eccab4070a258ab5d6a94b972b)