Bug#958055: dom4j: CVE-2020-10683: XML External Entity vulnerability in default SAX parser

[Salvatore Bonaccorso]

Source: dom4j
Version: 2.1.1-2
Severity: important
Tags: security upstream

Hi,

The following vulnerability was published for dom4j.

CVE-2020-10683[0]:
XML External Entity vulnerability in default SAX parser

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2020-10683
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10683
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1694235
[2] https://github.com/dom4j/dom4j/commit/a822852 (Patch)

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore