Description
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | libjdom1-java | 1.1.3-2.1 | — |
| Debian 14 | libjdom2-intellij-java | No fix yet | — |
| Debian 14 | libjdom2-java | 2.0.6-2.1 | — |
| Debian 13 | libjdom1-java | 1.1.3-2.1 | — |
| Debian 13 | libjdom2-intellij-java | No fix yet | — |
| Debian 13 | libjdom2-java | 2.0.6-2.1 | — |
| Debian 12 | libjdom1-java | 1.1.3-2.1 | — |
| Debian 12 | libjdom2-intellij-java | No fix yet | — |
| Debian 12 | libjdom2-java | 2.0.6-2.1 | — |
| Debian 9 | libjdom1-java | 1.1.3-1+deb9u1 | DLA-2712-1 |
| Debian 9 | libjdom2-java | 2.0.6-1+deb9u1 | DLA-2696-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | libjdom1-java +1 | No fix yet | — |
| Ubuntu 26.04 LTS | libjdom1-java +1 | No fix yet | — |
| Ubuntu 25.10 | libjdom1-java +1 | No fix yet | — |
| Ubuntu 24.04 LTS | libjdom1-java +1 | No fix yet | — |
| Ubuntu 22.04 LTS | libjdom1-java +1 | No fix yet | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | libjdom1-java +1 | No fix yet | — |
| Ubuntu 18.04 LTS | libjdom1-java +1 | No fix yet | — |
| Ubuntu 16.04 LTS | libjdom1-java +1 | No fix yet | — |
| Ubuntu 14.04 LTS | libjdom1-java | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | apiguardian | 1.1.2-150200.3.10.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | assertj-core | 3.25.3-150200.5.4.3 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | byte-buddy | 1.14.16-150200.5.7.1 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | jopt-simple | 5.0.4-150200.3.4.3 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | junit5 | 5.10.2-150200.3.10.3 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | junit5-minimal | 5.10.2-150200.3.10.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | open-test-reporting | 0.1.0~M2-150200.5.7.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP6 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLES 15 SP5 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP5 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP5 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES 15 SP5 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP5 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP5 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP5 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLES 15 SP4 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP4 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP4 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES 15 SP4 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP4 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP4 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP4 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLES 15 SP3 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP3 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP3 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES 15 SP3 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP3 | jdom2 | 2.0.6-3.3.1 | SUSE-SU-2021:2293-1 |
| SLES 15 SP3 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP3 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP3 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLES 15 SP2 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP2 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP2 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES 15 SP2 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP2 | jdom2 | 2.0.6-3.3.1 | SUSE-SU-2021:2293-1 |
| SLES 15 SP2 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP2 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES 15 SP2 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
Show 18 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | jdom | 1.1-150000.5.3.1 | SUSE-SU-2022:3547-1 |
| SLES 15 | jdom | 1.1-150000.5.3.1 | SUSE-SU-2022:3547-1 |
| SLES 12 SP5 | jdom | 1.1.3-26.5.1 | SUSE-SU-2024:1871-1 |
| SLES for SAP 15 SP4 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP4 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP4 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP4 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP4 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP4 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP4 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP3 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP3 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP3 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP3 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP3 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP3 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP3 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP2 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP2 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP2 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP2 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP2 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP2 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP2 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLES for SAP 15 SP1 | jdom | 1.1-150000.5.3.1 | SUSE-SU-2022:3547-1 |
| SLES for SAP 15 | jdom | 1.1-150000.5.3.1 | SUSE-SU-2022:3547-1 |
| SLE HPC 15 SP4 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP4 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP4 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP4 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP4 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP4 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP4 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP3 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP3 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP3 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP3 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP3 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP3 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP3 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP2 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP2 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP2 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP2 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP2 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP2 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP2 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SLE HPC 15 SP1 | jdom | 1.1-150000.5.3.1 | SUSE-SU-2022:3547-1 |
| SLE HPC 15 | jdom | 1.1-150000.5.3.1 | SUSE-SU-2022:3547-1 |
| SUSE Manager Server Module 4.3 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SUSE Manager Server Module 4.3 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SUSE Manager Server Module 4.3 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SUSE Manager Server Module 4.3 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SUSE Manager Server Module 4.3 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SUSE Manager Server 4.3 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SUSE Manager Proxy 4.3 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 7.1 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 7.1 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 7.1 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 7.1 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 7.1 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 7.1 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 7.1 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| SUSE Enterprise Storage 6 | jdom | 1.1-150000.5.3.1 | SUSE-SU-2022:3547-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | jdom | 1.1.3-40.1 | openSUSE-SU-2024:13180-1 |
| openSUSE Tumbleweed | jdom2 | 2.0.6-3.2 | openSUSE-SU-2024:10877-1 |
| openSUSE Leap 15.6 | apiguardian | 1.1.2-150200.3.10.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | assertj-core | 3.25.3-150200.5.4.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | byte-buddy | 1.14.16-150200.5.7.1 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | jopt-simple | 5.0.4-150200.3.4.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | junit5 | 5.10.2-150200.3.10.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | junit5-minimal | 5.10.2-150200.3.10.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | open-test-reporting | 0.1.0~M2-150200.5.7.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | saxpath | 1.0-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.6 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | apiguardian | 1.1.2-150200.3.10.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | assertj-core | 3.25.3-150200.5.4.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | byte-buddy | 1.14.16-150200.5.7.1 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | dom4j | 2.1.4-150200.12.10.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | hamcrest | 2.2-150200.12.17.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | jaxen | 2.0.0-150200.5.3.1 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | jdom | 1.1.3-150200.12.8.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | jopt-simple | 5.0.4-150200.3.4.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | junit | 4.13.2-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | junit5 | 5.10.2-150200.3.10.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | junit5-minimal | 5.10.2-150200.3.10.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | objectweb-asm | 9.7-150200.3.15.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | open-test-reporting | 0.1.0~M2-150200.5.7.2 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | saxpath | 1.0-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.5 | xom | 1.3.9-150200.5.3.3 | SUSE-SU-2024:1874-1 |
| openSUSE Leap 15.3 | jdom2 | 2.0.6-3.3.1 | openSUSE-SU-2021:2293-1 |
| openSUSE Leap 15.2 | jdom2 | 2.0.6-lp152.2.3.1 | openSUSE-SU-2021:1031-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | jdom +2 | 1.1.3-30.amzn2023.0.3 | ALAS2023-2023-014 |
| Amazon Linux 2 | jdom +2 | 1.1.3-6.1.amzn2.0.1 | ALAS2-2023-2045 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | jdom2 | No fix yet | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.jdom:jdom | <= 2.0.2 | — | GHSA-2363-cqg2-863c |
| Maven | org.jdom:jdom2 | < 2.0.6.1 | 2.0.6.1 | GHSA-2363-cqg2-863c |
Advisories 24
- WID-SEC-2022-0607 Red Hat FUSE: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 9, 2026
- WID-SEC-2024-0123 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 7, 2026
- DLA-2712-1 libjdom1-java - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2696-1 libjdom2-java - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2022:3547-1 Security update for jdom SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1871-1 Security update for jdom SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:13180-1 jdom-1.1.3-40.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2293-1 Security update for jdom2 SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2024:1874-1 Security update for Java SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1031-1 Security update for jdom2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:2293-1 Security update for jdom2 SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10877-1 jdom2-2.0.6-3.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2026-0180 Dell Data Protection Advisor: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2026-0165 Oracle Siebel CRM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 20, 2026
- WID-SEC-2022-1738 IBM InfoSphere Information Server: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 3, 2025
- WID-SEC-2025-1564 Oracle Siebel CRM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 15, 2025
- WID-SEC-2025-0835 Atlassian Jira: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Apr 15, 2025
- NCSC-2025-0028 Kwetsbaarheden verholpen in Oracle Analytics NCSC-NL (Netherlands) · Jan 22, 2025
- WID-SEC-2024-0068 IBM Business Automation Workflow: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024
- WID-SEC-2023-2029 IBM Integration Bus: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 6, 2024
- WID-SEC-2023-1807 Oracle Fusion Middleware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 26, 2023
- ALAS2-2023-2045 Moderate: jdom security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · May 16, 2023
- WID-SEC-2023-0689 IBM Spectrum Protect: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Mar 19, 2023
- ALAS2023-2023-014 Moderate: jdom security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Feb 22, 2023
References
- https://github.com/hunterhacker/jdom/pull/188
- https://github.com/hunterhacker/jdom/releases
- [debian-lts-announce] 20210629 [SECURITY] [DLA 2696-1] libjdom2-java security update mailing-list
- [solr-issues] 20210711 [jira] [Created] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813 mailing-list
- [solr-issues] 20210711 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813 mailing-list
- [solr-issues] 20210711 [jira] [Created] (SOLR-15530) High security vulnerability in jackson-databind bundled within Solr 8.9 mailing-list
- [debian-lts-announce] 20210720 [SECURITY] [DLA 2712-1] libjdom1-java security update mailing-list
- [tika-dev] 20210721 [jira] [Created] (TIKA-3488) Security issue XXE in TIKA due to JDOM mailing-list
- [solr-issues] 20210813 [jira] [Commented] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813 mailing-list
- [solr-issues] 20210813 [jira] [Updated] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813 mailing-list
- [solr-issues] 20210819 [jira] [Commented] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813 mailing-list
- [solr-issues] 20210819 [jira] [Resolved] (SOLR-15529) High security vulnerability in JDOM library bundled within Solr 8.9 CVE-2021-33813 mailing-list
- FEDORA-2021-3cb0d02576 vendor-advisory
- FEDORA-2021-f88d2dcc47 vendor-advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://alephsecurity.com/vulns/aleph-2021003
- https://www.oracle.com/security-alerts/cpujul2022.html