Lucene search

K
mageiaGentoo FoundationMGASA-2021-0133
HistoryMar 15, 2021 - 12:20 a.m.

Updated quartz packages fix a security vulnerability

2021-03-1500:20:42
Gentoo Foundation
advisories.mageia.org
94

0.008 Low

EPSS

Percentile

80.9%

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description (CVE-2019-13990).

OSVersionArchitecturePackageVersionFilename
Mageia7noarchquartz< 2.2.1-9.1quartz-2.2.1-9.1.mga7