Fedora 33: 2021-8015a8cdc4 Critical: dom4j XML Injection Security Fix

dom4j is an Open Source XML framework for Java. dom4j allows you to read,

write, navigate, create and modify XML documents. dom4j integrates with

DOM and SAX and is seamlessly integrated with full XPath support.

- Security fix for CVE-2018-1000632 - Update to upstream 2.0.3 bugfix release -Fix Fedora 34 FTBFS

* Thu Apr 29 2021 Hans de Goede - 0:2.0.3-1

- New upstream version 2.0.3

- Fix CVE-2018-1000632 (rhbz#1620535)

* Thu Apr 29 2021 Hans de Goede - 0:2.0.0-14

- Drop the org.dom4j.datatype bits, these depend on the obsolete msv project and

no Fedora packages runtime require msv, so no package seem to need these bits.

- Drop dom4j-demo and dom4j-manual Obsoletes, these no longer exist since F27.

- Fix FTBFS (rhbz#1923601)

* Tue Jan 26 2021 Fedora Release Engineering - 0:2.0.0-13

- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

[ 1 ] Bug #1620529 - CVE-2018-1000632 dom4j: XML Injection in Class: Element. Methods: addElement, addAttribute which can impact the integrity of XML documents

https://bugzilla.redhat.com/show_bug.cgi?id=1620529

su -c 'dnf upgrade --advisory FEDORA-2021-8015a8cdc4' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure