rpms/assertj-core
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Library of assertions similar to fest-assert
63 Commits 28 Branches 15 Tags 120 KiB
RPM Spec 100%
c10s
Go to file
RHEL Packaging Agent 55e257df96 Fix CVE-2026-24400: XXE vulnerability in assertj-core 
Add a patch to fix CVE-2026-24400 by enabling secure XML
parsing features in XmlStringPrettyFormatter. The patch
disables DOCTYPE declarations and external entity processing
to prevent XXE (XML External Entity) attacks. Backported from
upstream commit 77081dc5eb107141df80f95bd0149b468e451341,
adapted for the 3.24.2 source tree. Includes two new test
cases verifying that XML strings containing DOCTYPE with
general and parameter entities are properly rejected.

CVE: CVE-2026-24400
Upstream patches:
 - 77081dc5eb.patch

Resolves: RHEL-208838

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-17 14:55:58 +02:00
.fmf Onboard package into gating 2022-08-31 08:36:51 +02:00
plans Switch to javapackages tests from CentOS Stream GitLab 2025-03-26 16:06:19 +01:00
.gitignore Update to upstream version 3.24.2 2023-03-27 15:21:28 +02:00
assertj-core-3.24.2-CVE-2026-24400.patch Fix CVE-2026-24400: XXE vulnerability in assertj-core 2026-07-17 14:55:58 +02:00
assertj-core.spec Fix CVE-2026-24400: XXE vulnerability in assertj-core 2026-07-17 14:55:58 +02:00
ci.fmf Onboard package into gating 2022-08-31 08:36:51 +02:00
gating.yaml Update gating.yaml for RHEL 10 2024-07-02 11:31:14 +02:00
sources Update to upstream version 3.24.2 2023-03-27 15:21:28 +02:00