Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Mageia 7 MGASA-2021-0034: Dom4J XXE Moderate Security Advisory

mageia
Calendar Grey January 17, 2021
Dist Mageia Esm H88
Revised dom4j versions address a possible XXE vulnerability for Mageia 7 users along with available patches and citations.
A flaw was found in the dom4j library

Summary

A flaw was found in the dom4j library. By using the default SaxReader() provided by Dom4J, external DTDs and External Entities are allowed, resulting in a possible XXE (CVE-2020-10683).

References

- https://bugs.mageia.org/show_bug.cgi?id=25596

- https://lists.debian.org/debian-lts-announce/2020/04/msg00029.html

- https://www.cve.org/CVERecord?id=CVE-2020-10683

Topics%20covered

Topics Covered

security advisory moderate security issue software update updates XXE Mageia dom4j XXE risk

Resolution

SRPMS

- 7/core/dom4j-2.0.0-4.1.mga7

Severity
medium
Lowest
Low
Medium
High
Critical

Publication date: 17 Jan 2021
URL: https://advisories.mageia.org/MGASA-2021-0034.html
Type: security
CVE: CVE-2020-10683

Topics%20covered

Topics Covered

security advisory moderate security issue software update updates XXE Mageia dom4j XXE risk

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here