Publishing details

• Published on 2017-05-09
• Copied from ubuntu trusty in PPA for Ubuntu Security Proposed by Ubuntu Archive Robot

Changelog

fop (1:1.1.dfsg-2ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: SSRF through external DTD resolution
    - debian/patches/CVE-2017-5661.patch: disable external DTD resolution
      in src/java/org/apache/fop/cli/InputHandler.java,
      src/java/org/apache/fop/servlet/FopServlet.java.
    - Thanks to Debian for the patch backport.
    - CVE-2017-5661

 -- Marc Deslauriers <email address hidden>  Thu, 04 May 2017 12:56:32 -0400

Builds

• i386

Built packages

• fop XML formatter driven by XSL Formatting Objects (XSL-FO.)

• fop-doc XML formatter driven by XSL Formatting Objects (doc)

• libfop-java XML formatter driven by XSL Formatting Objects (XSL-FO.)

Package files

• fop-doc_1.1.dfsg-2ubuntu1.1_all.deb (2.4 MiB)
• fop_1.1.dfsg-2ubuntu1.1.debian.tar.gz (830.6 KiB)
• fop_1.1.dfsg-2ubuntu1.1.dsc (2.5 KiB)
• fop_1.1.dfsg-2ubuntu1.1_all.deb (11.9 KiB)
• fop_1.1.dfsg.orig.tar.gz (13.3 MiB)
• libfop-java_1.1.dfsg-2ubuntu1.1_all.deb (8.1 MiB)