Ubuntu
libxalan2-java package

libxalan2-java 2.7.1-7ubuntu0.1 source package in Ubuntu

Changelog

libxalan2-java (2.7.1-7ubuntu0.1) precise-security; urgency=medium

  * SECURITY UPDATE: information disclosure or arbitrary code execution via
    crafted XSLT programs
    - debian/patches/CVE-2014-0107.patch: disable external general
      entities, foreign attributes and access to the system properties in
      src/org/apache/xalan/transformer/TransformerImpl.java,
      src/org/apache/xalan/processor/XSLTElementProcessor.java,
      src/org/apache/xalan/processor/TransformerFactoryImpl.java,
      src/org/apache/xpath/functions/FuncSystemProperty.java.
    - CVE-2014-0107
 -- Marc Deslauriers <email address hidden>   Mon, 31 Mar 2014 13:19:53 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates main libs
Precise security main libs

Builds

Precise: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
libxalan2-java_2.7.1.orig.tar.gz 3.6 MiB 5a1213342047da146525c545b3fb71935617c2caf16c17ce9626df4606678501
libxalan2-java_2.7.1-7ubuntu0.1.debian.tar.gz 17.7 KiB 8effa137ac2a44cb37c29c25ccb97bcbeffd22d427d6e9ff32fe6870319e27b0
libxalan2-java_2.7.1-7ubuntu0.1.dsc 2.5 KiB 41e22f80b5879799ab4336f9d141fa6cdd72de9dbc7c7b861c32151e47c21e69

View changes file

Binary packages built by this source

libxalan2-java: XSL Transformations (XSLT) processor in Java

 Xalan-Java is an XSLT processor for transforming XML documents into HTML,
 text, or other XML document types. It implements the W3C Recommendations for
 XSL Transformations (XSLT) and the XML Path Language (XPath). It can be used
 from the command line, in an applet or a servlet, or as a module in other
 programs.

libxalan2-java-doc: Documentation and examples for the Xalan-Java XSLT processor

 Xalan-Java is an XSLT processor for transforming XML documents into HTML,
 text, or other XML document types. It implements the W3C Recommendations for
 XSL Transformations (XSLT) and the XML Path Language (XPath). It can be used
 from the command line, in an applet or a servlet, or as a module in other
 programs.
 .
 This package contains documentation in HTML format and some Java source
 code examples.

libxsltc-java: XSL Transformations (XSLT) compiler from Xalan-Java

 XSLTC provides a compiler and a runtime processor. Use the compiler to
 compile an XSL stylesheet into a translet (i.e. a set of Java classes).
 Use the runtime processor to apply the translet to an XML document and
 perform a transformation. XSLTC is part of the Xalan-Java project.