lp://staging/ubuntu/precise-updates/libxalan2-java

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

11. By Marc Deslauriers on 2014-03-31

* SECURITY UPDATE: information disclosure or arbitrary code execution via
  crafted XSLT programs
  - debian/patches/CVE-2014-0107.patch: disable external general
    entities, foreign attributes and access to the system properties in
    src/org/apache/xalan/transformer/TransformerImpl.java,
    src/org/apache/xalan/processor/XSLTElementProcessor.java,
    src/org/apache/xalan/processor/TransformerFactoryImpl.java,
    src/org/apache/xpath/functions/FuncSystemProperty.java.
  - CVE-2014-0107

10. By Jakub Adam on 2011-11-26

[Jakub Adam]
* Add OSGi metadata to jar manifest
* Add javahelper to Build-Depends
* Add Jakub Adam to Uploaders.
* Require libstylebook-java (>> 1.0~b3~svn20061109-4) in Build-Depends
  because of FTBFS with this version.

[tony mancill]
* Drop recommends on -gcj packages. (Closes: #651047)
  - Thanks to Martin Pitt.
* Update Vcs-Svn URL.
* Bump standards version to 3.9.2 (no changes).

9. By Martin Pitt on 2011-12-05

* Synchronize with Debian unstable. Remaining Ubuntu changes:
  - debian/control: Drop leftover Recommends: to the dropped -gcj packages.
    (Debian #651047)

8. By Adam Conrad on 2011-12-02

No-change rebuild to drop spurious libsfgcc1 dependency on armhf.

7. By Matthias Klose on 2009-10-18

* Merge with Debian; remaining changes:
  - debian/control: Only suggest libxalan2-java-gcj on selected architectures,
    and libxalan2-java architecture "any" to have it work (LP: #386307).

6. By Thierry Carrez on 2009-08-14

debian/control: Only suggest libxalan2-java-gcj on selected architectures,
and libxalan2-java architecture "any" to have it work (LP: #386307)

5. By Michael Koch on 2008-04-27

* Build-Depends on default-jdk-builddep. Closes: #477893
* Clarified debian/copyright.
* Don't use '-1' in Build-Depends.
* Updated watch file to match upstream correctly.

4. By Marcus Better on 2006-10-17

* debian/rules: Also install serializer.jar. (Closes: #390148)
* debian/control: Added myself as uploader.
* debian/control: Changed duplicate Build-Depends-Indep to Build-Depends.
* Bumped compatibility level to 5.

3. By Stefan Gybas <email address hidden> on 2004-03-14

* New upstream release
* Don't ship xml-apis.jar any longer since its contents are equal to
  xmlParserAPIs.jar from libxerces2-java
* Use Xerces 2.0 Ant 1.6 during build
* Don't install versioned JARs in /usr/share/java since this package has
  no API itself

2. By Ola Lundqvist on 2001-04-16

Initial Release, closes: #90452.