UbuntuUpdates.org

Package "libxsltc-java"

Name: libxsltc-java

Description:

XSL Transformations (XSLT) compiler from Xalan-Java
Latest version: 2.7.1-7ubuntu0.1
Release: precise (12.04)
Level: updates
Repository: main
Head package: libxalan2-java
Homepage: http://xml.apache.org/xalan-j/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libxsltc-java"

All arch deb package
APT INSTALL

Other versions of "libxsltc-java" in Precise

Repository Area Version
base main 2.7.1-7
security main 2.7.1-7ubuntu0.1

Changelog

Version: 2.7.1-7ubuntu0.1 2014-05-21 21:07:20 UTC

  libxalan2-java (2.7.1-7ubuntu0.1) precise-security; urgency=medium

  * SECURITY UPDATE: information disclosure or arbitrary code execution via
    crafted XSLT programs
    - debian/patches/CVE-2014-0107.patch: disable external general
      entities, foreign attributes and access to the system properties in
      src/org/apache/xalan/transformer/TransformerImpl.java,
      src/org/apache/xalan/processor/XSLTElementProcessor.java,
      src/org/apache/xalan/processor/TransformerFactoryImpl.java,
      src/org/apache/xpath/functions/FuncSystemProperty.java.
    - CVE-2014-0107
 -- Marc Deslauriers <email address hidden> Mon, 31 Mar 2014 13:19:53 -0400
CVE-2014-0107 Xalan-Java insufficient secure processing


About   -   Send Feedback to @ubuntu_updates