[Bugs] [Bug 13249] New: [CVE 21] java-xmlbuilder 1.1 CVEs found

[bugzilla]

https://bugzilla.rosalinux.ru/show_bug.cgi?id=13249

          Platform: 2021.1
            Bug ID: 13249
           Summary: [CVE 21] java-xmlbuilder 1.1 CVEs found
    Classification: ROSA-based products
           Product: ROSA Fresh
           Version: All
          Hardware: All
               URL: CVE-2014-125087,
                OS: Linux
            Status: CONFIRMED
          Severity: normal
          Priority: Normal
         Component: System (kernel, glibc, systemd, bash, PAM...)
          Assignee: bugs на lists.rosalinux.ru
          Reporter: y.tumanov на rosalinux.ru
        QA Contact: bugs на lists.rosalinux.ru
                CC: s.matveev на rosalinux.ru, y.tumanov на rosalinux.ru
  Target Milestone: ---
             Flags: secteam_verified?

Please patch CVEs for package java-xmlbuilder version 1.1  
INFO (CVEs are): java-xmlbuilder 1.1 cves found
CVE-2014-125087
Desc: A vulnerability was found in java-xmlbuilder up to 1.1. It has been rated
as problematic. Affected by this issue is some unknown functionality. The
manipulation leads to xml external entity reference. Upgrading to version 1.2
is able to address this issue. The name of the patch is
e6fddca201790abab4f2c274341c0bb8835c3e73. It is recommended to upgrade the
affected component. The identifier of this vulnerability is VDB-221480.
Link: https://nvd.nist.gov/vuln/detail/CVE-2014-125087
Severity: CRITICAL

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
----------- следущая часть -----------
Вложение в формате HTML было извлечено…
URL: <http://lists.rosalinux.ru/pipermail/bugs/attachments/20230502/3741f023/attachment.html>