libxalan2-java 2.7.1-8ubuntu0.1 source package in Ubuntu

Changelog

libxalan2-java (2.7.1-8ubuntu0.1) saucy-security; urgency=medium

  * SECURITY UPDATE: information disclosure or arbitrary code execution via
    crafted XSLT programs
    - debian/patches/CVE-2014-0107.patch: disable external general
      entities, foreign attributes and access to the system properties in
      src/org/apache/xalan/transformer/TransformerImpl.java,
      src/org/apache/xalan/processor/XSLTElementProcessor.java,
      src/org/apache/xalan/processor/TransformerFactoryImpl.java,
      src/org/apache/xpath/functions/FuncSystemProperty.java.
    - CVE-2014-0107
 -- Marc Deslauriers <email address hidden>   Mon, 31 Mar 2014 13:12:34 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Saucy
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Saucy: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
libxalan2-java_2.7.1.orig.tar.gz 3.6 MiB 5a1213342047da146525c545b3fb71935617c2caf16c17ce9626df4606678501
libxalan2-java_2.7.1-8ubuntu0.1.debian.tar.gz 17.7 KiB 2522f7da1733251c3455cda7940b1741522943a1b6692a43bc6320c74b19a71e
libxalan2-java_2.7.1-8ubuntu0.1.dsc 2.4 KiB d78bb9a9d7548b8d5fbf7518d02a84fbcd8fa4801a09edca6b0c9a9f56760835

View changes file

Binary packages built by this source

libxalan2-java: No summary available for libxalan2-java in ubuntu saucy.

No description available for libxalan2-java in ubuntu saucy.

libxalan2-java-doc: No summary available for libxalan2-java-doc in ubuntu saucy.

No description available for libxalan2-java-doc in ubuntu saucy.

libxsltc-java: No summary available for libxsltc-java in ubuntu saucy.

No description available for libxsltc-java in ubuntu saucy.