[CLSA-2026:1788370561] assertj-core: Fix of CVE-2026-24400
Type:
security
Severity:
Critical
Release date:
2026-09-02 17:36:12 UTC
Description:
- CVE-2026-24400: enable secure processing and disable DTDs and external entities in XmlStringPrettyFormatter's DocumentBuilderFactory, preventing XXE through isXmlEqualTo() and xmlPrettyFormat()
CVEs fixed:
Updated packages:
  • assertj-core-3.19.0-9.el9_6.tuxcare.els1.noarch.rpm
    sha:234b68146bfa39072fcf5d135377899d9268af068b51fb40733e01acb326349d
  • assertj-core-javadoc-3.19.0-9.el9_6.tuxcare.els1.noarch.rpm
    sha:32360407fac10780e911d9bc83e86cdc66587afbfc94c63dad4372cd79a71627
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.