Updated dom4j packages fix security vulnerabilityPublication date: 14 Feb 2019
Affected Mageia releases : 6
dom4j version prior to version 2.1.1 contains an XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appears to be exploitable via an attacker specifying attributes or elements in the XML document (CVE-2018-1000632).