RHSA-2025:1256: Moderate: doxygen security update
Doxygen can generate an online class browser (in HTML) and/or a reference manual (in LaTeX) from a set of documented source files. The documentation is extracted directly from the sources. Doxygen can also be configured to extract the code structure from undocumented source files. <br>Security Fix(es):<br><li> jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods (CVE-2020-11023)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:1256?
The severity of RHSA-2025:1256 is categorized as moderate.
How do I fix RHSA-2025:1256?
To fix RHSA-2025:1256, you should update the doxygen package to version 1.8.5-3.el7_7.1 or later.
Which packages are affected by RHSA-2025:1256?
The affected packages include doxygen, doxygen-debuginfo, doxygen-doxywizard, and doxygen-latex.
Is there a need to restart after applying the fix for RHSA-2025:1256?
No, a restart is not required after updating the doxygen package for RHSA-2025:1256.
What systems are impacted by RHSA-2025:1256?
RHSA-2025:1256 impacts Red Hat Enterprise Linux Server versions that utilize the affected doxygen packages.