CVE:CVE-2021-22922
CNNVD:CNNVD-202107-1567
Arch Linux是Arch开源的一个应用系统。一个轻量级且灵活的Linux®发行版，试图使它保持简单。
Arch Linux 中存在代码问题漏洞，该漏洞源于未能充分验证用户输入的XML数据，攻击者可通过该漏洞向受影响的应用程序传递专门编写的XML代码，并查看系统上任意文件的内容，或向外部系统发起请求。以下产品及版本受到影响: Arch Linux Curl 7.78.0-1 之前版本。
solution:Upgrade haxx curl to a higher version than 7.78.0,and avoid the version [7.27.0,7.78.0); Upgrade fedoraproject fedora to a higher version than 33,and avoid the version 33; Upgrade netapp cloud_backup to a higher version than -; Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade netapp hci_management_node to a higher version than -; Upgrade netapp solidfire to a higher version than -; Upgrade oracle mysql_server to a higher version than 5.7.35,8.0.26,and avoid the version [5.7.0,5.7.35],[8.0.0,8.0.26]; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1); Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -