- Committer: Package Import Robot
- Date: 2014-03-31 13:12:34 UTC
- Revision ID: package-import@ubuntu.com-20140331131234-fpfj14nkqhz5bymn
* SECURITY UPDATE: information disclosure or arbitrary code execution via
crafted XSLT programs
- debian/patches/CVE-2014-0107.patch: disable external general
entities, foreign attributes and access to the system properties in
src/org/apache/xalan/transformer/TransformerImpl.java,
src/org/apache/xalan/processor/XSLTElementProcessor.java,
src/org/apache/xalan/processor/TransformerFactoryImpl.java,
src/org/apache/xpath/functions/FuncSystemProperty.java.
- CVE-2014-0107
crafted XSLT programs
- debian/patches/CVE-2014-0107.patch: disable external general
entities, foreign attributes and access to the system properties in
src/org/apache/xalan/transformer/TransformerImpl.java,
src/org/apache/xalan/processor/XSLTElementProcessor.java,
src/org/apache/xalan/processor/TransformerFactoryImpl.java,
src/org/apache/xpath/functions/FuncSystemProperty.java.
- CVE-2014-0107
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
.pc
|
5.2.2 | 12 years ago | Bazaar Package Importer | * Team upload * Do no longer build the *-gcj packa |
|
||
|
debian
|
2 | 23 years ago | Bazaar Package Importer | Initial Release, closes: #90452. |
|
||
|
lib
|
1.1.2 | 17 years ago | Bazaar Package Importer | Import upstream version 2.7.0 |
|
||
|
samples
|
1 | 23 years ago | Bazaar Package Importer | Import upstream version 2.0.1 |
|
||
|
src
|
1 | 23 years ago | Bazaar Package Importer | Import upstream version 2.0.1 |
|
||
|
tools
|
1.1.2 | 17 years ago | Bazaar Package Importer | Import upstream version 2.7.0 |
|
||
|
xdocs
|
1 | 23 years ago | Bazaar Package Importer | Import upstream version 2.0.1 |
|
||
build.bat |
1.1.3 | 16 years ago | Bazaar Package Importer | Import upstream version 2.7.1 | 2.9 KB |
|
|
|
build.sh |
5 | 16 years ago | Bazaar Package Importer | * Build-Depends on default-jdk-builddep. Closes: # | 2.1 KB |
|
|
|
build.xml |
5.2.2 | 12 years ago | Bazaar Package Importer | * Team upload * Do no longer build the *-gcj packa | 88.5 KB |
|
|
|
commits.xml |
1.1.3 | 16 years ago | Bazaar Package Importer | Import upstream version 2.7.1 | 116 KB |
|
|
|
KEYS |
1.1.3 | 16 years ago | Bazaar Package Importer | Import upstream version 2.7.1 | 20.2 KB |
|
|
|
LICENSE.txt |
1.1.3 | 16 years ago | Bazaar Package Importer | Import upstream version 2.7.1 | 32.7 KB |
|
|
|
NOTICE.txt |
1.1.3 | 16 years ago | Bazaar Package Importer | Import upstream version 2.7.1 | 3.6 KB |
|
|
|
readme.html |
1.1.3 | 16 years ago | Bazaar Package Importer | Import upstream version 2.7.1 | 914 bytes |
|
|