CVE-2018-1000632 — Dom4j contains a XML Injection vulnerability

Description

dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	dom4j	2.1.1-1	—
Debian 13	dom4j	2.1.1-1	—
Debian 12	dom4j	2.1.1-1	—
Debian 8	dom4j	1.6.1+dfsg.3-2+deb8u1	DLA-1517-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 18.04 LTS	dom4j	No fix yet	—
Ubuntu 16.04 LTS	dom4j	1.6.1+dfsg.3-2ubuntu1.2	USN-4619-1
Ubuntu 14.04 LTS	dom4j	No fix yet	—

Red Hat

Security tracker ↗

Release	Package	Fixed in	Advisory
RHEL 7	rhvm-appliance	2:4.3-20190502.0.el7	RHEA-2019:1119

Show 4 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Red Hat Satellite Capsule 6	ansible-runner +1	1.3.4-2.el7ar	RHSA-2019:3172
Red Hat Satellite Capsule 6	ansiblerole-foreman_scap_client	0.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	ansiblerole-insights-client	1.6-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	createrepo_c +1	0.7.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman +1	1.22.0.32-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-bootloaders-redhat +1	201901011200-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-discovery-image	1:3.5.4-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-installer +1	1:1.22.0.16-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-proxy +1	1.22.0.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	foreman-selinux	1.22.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	future +1	0.16.0-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	gofer +2	2.12.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	hfsplus-tools	332.14-12.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello +4	3.12.0-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello-certs-tools	2.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello-client-bootstrap	1.7.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	katello-selinux	3.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	kobo	0.5.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	libmodulemd	1.7.0-1.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	libsolv +1	0.7.4-3.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	libwebsockets	2.4.2-2.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	livecd-tools +1	1:20.4-1.6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	mod_xsendfile	0.12-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	ostree	2017.1-2.atomic.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp +14	2.19.1.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-docker +3	3.2.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-katello	1.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-ostree +3	1.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-puppet +3	2.19.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pulp-rpm +4	2.19.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppet-agent	5.5.12-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppet-agent-oauth	0.5.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppet-foreman_scap_client	0.3.19-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppetlabs-stdlib	4.25.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	puppetserver	5.3.8-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pycairo	1.16.3-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	pygobject3 +2	3.28.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-amqp +1	2.2.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-anyjson +1	0.3.3-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-billiard +1	1:3.5.0.3-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-blinker	1.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-bson +2	3.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-celery +1	4.0.2-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-click +1	6.7-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-crane +1	3.3.1-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-daemon +1	2.1.2-7.el7at	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-django +1	1.11.13-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-flask +1	1:0.12.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-gnupg	0.3.7-1.el7ui	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-isodate +1	0.5.4-12.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-itsdangerous +1	0.24-15.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-jinja2 +1	2.10-10.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-kid	0.9.6-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-kombu +1	10:4.0.2-13.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-lockfile +1	1:0.11.0-10.el7ar	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-markupsafe +1	0.23-21.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-mongoengine	0.10.5-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-nectar +1	1.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-oauth2	1.5.211-8.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-okaara +1	1.0.37-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-pexpect +1	4.6-1.el7at	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-psutil	5.0.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-ptyprocess +1	0.5.2-3.el7at	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-pycurl +1	7.43.0.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-qpid	1.35.0-5.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-semantic_version	2.2.0-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-simplejson	3.2.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-twisted +1	16.4.1-12.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-vine +1	10:1.1.3-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-werkzeug +1	0.12.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	python-zope-interface	4.0.5-4.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	qpid-cpp +6	1.36.0-28.el7amq	RHSA-2019:3172
Red Hat Satellite Capsule 6	qpid-dispatch +2	1.5.0-4.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	qpid-proton +2	0.28.0-1.el7	RHSA-2019:3172
Red Hat Satellite Capsule 6	repoview	0.6.6-11.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-ansi	1.4.3-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-bundler_ext	0.4.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-clamp	1.1.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-concurrent-ruby	1:1.1.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-faraday	0.15.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-faraday_middleware	0.13.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-fast_gettext	1.1.0-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-ffi	1.4.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-gssapi	1.1.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-hashie	2.0.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-highline	1.7.8-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-journald-logger	2.0.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-journald-native	1.0.11-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-jwt	1.2.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-kafo +1	3.0.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-kafo_parsers +2	1.0.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-kafo_wizards	0.0.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-little-plugger	1.1.3-22.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-logging	2.2.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-logging-journald	2.0.0-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-mime-types	1.19-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-multi_json	1.12.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-multipart-post	2.0.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-net-ssh +1	4.2.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-netrc	0.7.7-9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-newt	0.9.6-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-oauth	0.5.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-openscap	0.4.7-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-powerbar	2.0.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rack	1:1.6.4-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rack-protection	1.5.3-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rake	0.9.2.2-41.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rb-inotify	0.9.7-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rest-client	1.6.7-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rkerberos	0.1.5-15.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rsec	0.4.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-rubyipmi	0.10.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-sinatra	1:1.4.7-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_ansible +1	3.0.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dhcp_infoblox	0.0.15-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dhcp_remote_isc	0.0.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_discovery	1.0.5-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_discovery_image	1.0.9-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_dynflow	0.2.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_openscap	0.7.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_pulp	1.4.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-smart_proxy_remote_execution_ssh	0.2.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	rubygem-tilt	1.3.7-2.git.0.3b416c9.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	saslwrapper +1	0.22-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	satellite +3	6.6.0-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	satellite-installer	6.6.0.21-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm +1	5.0-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52 +1	1.0-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-concurrent-ruby	1.1.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-mime-types	3.2.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-mime-types-data	3.2018.0812-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-multi_json	1.13.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-mustermann	1.0.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-rack	2.0.6-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-sinatra +1	2.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-sqlite3	1.3.13-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-ror52-rubygem-tilt	2.0.8-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-algebrick	0.7.3-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-apipie-params	0.0.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-bundler_ext	0.4.1-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-concurrent-ruby-edge	1:0.4.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-domain_name	0.5.20160310-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-dynflow	1.2.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-ffi	1.4.0-12.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-foreman-tasks-core	0.3.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-foreman_remote_execution_core	1.2.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-gssapi	1.2.0-6.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-http-cookie	1.0.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-net-ssh-krb	0.4.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-netrc	0.11.0-3.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-rest-client	2.0.1-4.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-sequel	5.7.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-smart_proxy_dynflow_core	0.2.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-statsd-instrument	2.1.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-unf	0.1.3-7.el7sat	RHSA-2019:3172
Red Hat Satellite Capsule 6	tfm-rubygem-unf_ext	0.0.6-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	ansible-runner	1.3.4-2.el7ar	RHSA-2019:3172
Red Hat Satellite 6	ansiblerole-foreman_scap_client	0.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	ansiblerole-insights-client	1.6-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	candlepin +1	2.6.9-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	createrepo_c +1	0.7.4-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman +12	1.22.0.32-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-bootloaders-redhat +1	201901011200-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-discovery-image	1:3.5.4-6.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-installer +1	1:1.22.0.16-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-proxy +1	1.22.0.2-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	foreman-selinux	1.22.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	future	0.16.0-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	gofer +2	2.12.5-5.el7sat	RHSA-2019:3172
Red Hat Satellite 6	hfsplus-tools	332.14-12.el7	RHSA-2019:3172
Red Hat Satellite 6	katello +4	3.12.0-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	katello-certs-tools	2.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	katello-client-bootstrap	1.7.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	katello-selinux	3.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	kobo	0.5.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	libmodulemd	1.7.0-1.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite 6	libsolv	0.7.4-3.pulp.el7sat	RHSA-2019:3172
Red Hat Satellite 6	libwebsockets	2.4.2-2.el7	RHSA-2019:3172
Red Hat Satellite 6	livecd-tools +1	1:20.4-1.6.el7sat	RHSA-2019:3172
Red Hat Satellite 6	mod_passenger	4.0.18-24.el7sat	RHSA-2019:3172
Red Hat Satellite 6	mod_xsendfile	0.12-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	ostree	2017.1-2.atomic.el7	RHSA-2019:3172
Red Hat Satellite 6	pcp-mmvstatsd	0.4-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp +9	2.19.1.1-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-docker +3	3.2.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-katello	1.0.3-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-ostree +3	1.3.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-puppet +4	2.19.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pulp-rpm +4	2.19.1.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppet-agent	5.5.12-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppet-agent-oauth	0.5.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppet-foreman_scap_client	0.3.19-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppetlabs-stdlib	4.25.1-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	puppetserver	5.3.8-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pycairo	1.16.3-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	pygobject3	3.28.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-amqp	2.2.2-5.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-anyjson	0.3.3-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-billiard	1:3.5.0.3-3.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-blinker	1.3-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-bson	3.2-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-celery	4.0.2-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-click	6.7-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-crane	3.3.1-9.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-daemon	2.1.2-7.el7at	RHSA-2019:3172
Red Hat Satellite 6	python-django	1.11.13-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-flask	1:0.12.2-4.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-gnupg	0.3.7-1.el7ui	RHSA-2019:3172
Red Hat Satellite 6	python-isodate	0.5.4-12.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-itsdangerous	0.24-15.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-jinja2	2.10-10.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-kid	0.9.6-11.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-kombu	10:4.0.2-13.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-lockfile	1:0.11.0-10.el7ar	RHSA-2019:3172
Red Hat Satellite 6	python-markupsafe	0.23-21.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-mongoengine	0.10.5-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-nectar	1.6.0-1.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-oauth2	1.5.211-8.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-okaara	1.0.37-2.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-pexpect	4.6-1.el7at	RHSA-2019:3172
Red Hat Satellite 6	python-psutil	5.0.1-3.el7sat	RHSA-2019:3172
Red Hat Satellite 6	python-ptyprocess	0.5.2-3.el7at	RHSA-2019:3172
Red Hat JBoss EAP 7	eap7-activemq-artemis +15	1.5.5.015-1.redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-apache-cxf +3	3.1.16-2.redhat_2.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-dom4j	2.1.1-1.redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-hibernate +5	5.1.17-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-ironjacamar +8	1.4.12-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jackson-databind	2.8.11.3-1.redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jandex	2.0.5-1.Final_redhat_1.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jberet +1	1.2.7-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jboss-ejb-client	4.0.12-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jboss-el-api_3.0_spec	1.0.13-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jboss-logmanager	2.0.11-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jboss-modules	1.6.7-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jboss-security-negotiation	3.0.5-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-jbossws-common	3.1.7-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-narayana +10	5.5.34-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-picketlink-api +9	2.5.5-15.SP12_redhat_3.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-undertow	1.4.18-10.SP11_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-undertow-jastow	2.0.7-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-wildfly +1	7.1.6-4.GA_redhat_00002.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-wildfly-common	1.2.1-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-wildfly-elytron	1.1.12-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-wildfly-elytron-tool	1.0.9-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-wildfly-javadocs	7.1.6-2.GA_redhat_00002.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 7	eap7-wildfly-web-console-eap	2.9.19-1.Final_redhat_00001.1.ep7.el6	RHSA-2019:0365, RHSA-2019:0364
Red Hat JBoss EAP 6	apache-cxf	2.7.18-8.SP7_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	dom4j-eap6	1.6.1-22.redhat_9.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	hornetq	2.3.25-28.SP29_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	ironjacamar-eap6 +9	1.0.43-1.Final_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	jboss-as-ee +55	7.5.22-1.Final_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	jboss-hal +1	2.5.19-1.Final_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	jboss-remote-naming	1.0.15-1.Final_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	jbossas-core +6	7.5.22-2.Final_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	jbossweb	7.5.30-1.Final_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159
Red Hat JBoss EAP 6	resteasy	2.3.23-1.Final_redhat_1.1.ep6.el5	RHSA-2019:1161, RHSA-2019:1160, RHSA-2019:1159

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SLES 11 SP4	dom4j	1.6.1-8.3.8.1	SUSE-SU-2018:3424-1

Show 4 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SUSE Package Hub 15	dom4j	1.6.1-bp150.2.3.1	openSUSE-SU-2018:4045-1
SUSE Manager Server 3.2	dom4j	1.6.1-27.4.1	SUSE-SU-2018:2861-1
SUSE Manager Server 3.1	dom4j	1.6.1-3.3.2	SUSE-SU-2018:2863-1
SUSE Manager Server 3.0	dom4j	1.6.1-27.4.1	SUSE-SU-2018:2861-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	dom4j	1.6.1-33.6	openSUSE-SU-2024:10724-1

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Maven	dom4j:dom4j	<= 1.6.1	—	GHSA-6pcc-3rfx-4gpm
Maven	org.dom4j:dom4j	< 2.0.3	2.0.3	GHSA-6pcc-3rfx-4gpm
Maven	org.dom4j:dom4j	>= 2.1.0, < 2.1.1	2.1.1	GHSA-6pcc-3rfx-4gpm

Advisories 16

RHEA-2019:1119 Red Hat Enhancement Advisory: rhvm-appliance security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
RHSA-2019:3172 Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2019:1160 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.22 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2019:1161 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.22 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2019:1159 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.22 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2019:0365 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.6 for RHEL 7 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
RHSA-2019:0364 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.6 on RHEL 6 security update Red Hat Security Advisories (RHSA) · Aug 5, 2026
USN-4619-1 dom4j vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
DLA-1517-1 dom4j - security update Debian Security (DSA / DLA) · Mar 9, 2026
SUSE-SU-2018:2861-1 Security update for dom4j SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2018:2863-1 Security update for dom4j SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2018:4045-1 Security update for dom4j SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:10724-1 dom4j-1.6.1-33.6 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2018:3424-1 Security update for dom4j SUSE / openSUSE Security Updates · Feb 4, 2026
WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
WID-SEC-2024-0068 IBM Business Automation Workflow: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024

Dom4j contains a XML Injection vulnerability

Description

Fixed in Linux distributions

Debian

Ubuntu

Red Hat

SUSE

openSUSE

Affected packages

Advisories 16

References