ALT-PU-2020-4245: package c3p0 update to version 0.9.5.4-alt1_2jpp8
Описание
This update upgrades c3p0 to version 0.9.5.4-alt1_2jpp8.
Устраненные уязвимости2
Связанные уязвимости
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack whe ...
