rpms/assertj-core
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Library of assertions similar to fest-assert
19 Commits 28 Branches 15 Tags 120 KiB
RPM Spec 100%
77482ccb26
Go to file
RHEL Packaging Agent 77482ccb26 Fix CVE-2026-24400: XXE vulnerability in assertj-core 
Backport upstream commit 77081dc5e to assertj-core 3.19.0 to
fix CVE-2026-24400. The patch hardens XmlStringPrettyFormatter
against XML External Entity (XXE) attacks by enabling
FEATURE_SECURE_PROCESSING and disallowing DOCTYPE declarations
in the XML parser configuration. Two new tests verify that
inputs containing DOCTYPE declarations with entity and
parameter entity injections are properly rejected.

CVE: CVE-2026-24400
Upstream patches:
 - 77081dc5eb.patch

Resolves: RHEL-208834

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-17 14:57:48 +02:00
.fmf Add javapackages test 2024-11-23 21:52:01 +01:00
plans Switch to javapackages tests from CentOS Stream GitLab 2025-04-17 08:06:30 +02:00
.gitignore Bootstrap Maven as non-modular packages 2021-06-08 20:28:34 +02:00
assertj-core-3.19.0-CVE-2026-24400.patch Fix CVE-2026-24400: XXE vulnerability in assertj-core 2026-07-17 14:57:48 +02:00
assertj-core.spec Fix CVE-2026-24400: XXE vulnerability in assertj-core 2026-07-17 14:57:48 +02:00
ci.fmf Add javapackages test 2024-11-23 21:52:01 +01:00
gating.yaml Switch to javapackages tests from CentOS Stream GitLab 2025-04-17 08:06:30 +02:00
sources Bootstrap Maven as non-modular packages 2021-06-08 20:28:34 +02:00