Ubuntu
libxml-security-java package

libxml-security-java 2.0.10-2+deb11u1build0.20.04.1 source package in Ubuntu

Changelog

libxml-security-java (2.0.10-2+deb11u1build0.20.04.1) focal-security; urgency=medium

  * fake sync from Debian

libxml-security-java (2.0.10-2+deb11u1) bullseye-security; urgency=high

  * Team upload.
  * Fix CVE-2021-40690:
    Apache Santuario - XML Security for Java is vulnerable to an issue where
    the "secureValidation" property is not passed correctly when creating a
    KeyInfo from a KeyInfoReference element. This allows an attacker to abuse
    an XPath Transform to extract any local .xml files in a RetrievalMethod
    element.

 -- Fabian Toepfer <email address hidden>  Tue, 19 Jul 2022 01:06:52 +0200

Upload details

Uploaded by:
Fabian Toepfer
Uploaded to:
Focal
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe libs
Focal security universe libs

Builds

Focal: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libxml-security-java_2.0.10.orig.tar.xz 781.7 KiB 0f205c2e911e2b4a706d336d4b117beb1e416a272ec18bd77505f68bd000d158
libxml-security-java_2.0.10-2+deb11u1build0.20.04.1.debian.tar.xz 9.5 KiB 0ef86ce2622b5e441bd0851b8d15346cd0107559c55d89f83e912156a2475521
libxml-security-java_2.0.10-2+deb11u1build0.20.04.1.dsc 2.6 KiB d9d08623ef8d3d761b45ad6af6571b6cefff56e9bec9ed4fa9c4290a08403715

View changes file

Binary packages built by this source

libxml-security-java: Apache Santuario -- XML Security for Java

 Apache Santuario supports XML-Signature Syntax and Processing, W3C
 Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C
 Recommendation 10 December 2002. As of version 1.4, the Java library supports
 the standard Java API JSR-105: XML Digital Signature APIs.

libxml-security-java-doc: Documentation for Apache Santuario

 Apache Santuario supports XML-Signature Syntax and Processing, W3C
 Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C
 Recommendation 10 December 2002. As of version 1.4, the Java library supports
 the standard Java API JSR-105: XML Digital Signature APIs.
 .
 This package contains the API documentation of libxml-security-java.