Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:2293-1

Опубликовано: 12 июл. 2021
Источник: suse-cvrf

Описание

Security update for jdom2

This update for jdom2 fixes the following issues:

  • CVE-2021-33813: XXE issue in SAXBuilder can cause a denial of service via a crafted HTTP request (bsc#1187446)

Список пакетов

SUSE Linux Enterprise Module for Development Tools 15 SP2
jdom2-2.0.6-3.3.1
SUSE Linux Enterprise Module for Development Tools 15 SP3
jdom2-2.0.6-3.3.1

Описание

An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.


Затронутые продукты
SUSE Linux Enterprise Module for Development Tools 15 SP2:jdom2-2.0.6-3.3.1
SUSE Linux Enterprise Module for Development Tools 15 SP3:jdom2-2.0.6-3.3.1

Ссылки