USN-4619-1: dom4j vulnerability
5 November 2020
dom4j could be made to crash or run programs if it received a specially crafted file.
Releases
Packages
- dom4j - Flexible XML framework for Java
Details
Mário Areias discovered that dom4j did not properly validate XML document
elements. An attacker could exploit this with a crafted XML file to cause
dom4j to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2018-1000632)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
In general, a standard system update will make all the necessary changes.