Format: 1.8
Date: Mon, 31 Mar 2014 13:20:32 -0400
Source: libxalan2-java
Binary: libxalan2-java libxalan2-java-gcj libxsltc-java libxsltc-java-gcj libxalan2-java-doc
Architecture: amd64
Version: 2.7.1-5ubuntu1.1
Distribution: lucid
Urgency: medium
Maintainer: Ubuntu/amd64 Build Daemon <buildd@klock.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description: 
 libxalan2-java - XSL Transformations (XSLT) processor in Java
 libxalan2-java-doc - Documentation and examples for the Xalan-Java XSLT processor
 libxalan2-java-gcj - XSL Transformations (XSLT) processor in Java (native code)
 libxsltc-java - XSL Transformations (XSLT) compiler from Xalan-Java
 libxsltc-java-gcj - XSL Transformations (XSLT) compiler from Xalan-Java (native code)
Changes: 
 libxalan2-java (2.7.1-5ubuntu1.1) lucid-security; urgency=medium
 .
   * SECURITY UPDATE: information disclosure or arbitrary code execution via
     crafted XSLT programs
     - debian/patches/CVE-2014-0107.patch: disable external general
       entities, foreign attributes and access to the system properties in
       src/org/apache/xalan/transformer/TransformerImpl.java,
       src/org/apache/xalan/processor/XSLTElementProcessor.java,
       src/org/apache/xalan/processor/TransformerFactoryImpl.java,
       src/org/apache/xpath/functions/FuncSystemProperty.java.
     - CVE-2014-0107
Checksums-Sha1: 
 cdf4d67fb3b44facddaa5bc144a7c4687d571d7b 3358378 libxalan2-java_2.7.1-5ubuntu1.1_amd64.deb
 5c357b2a804e1c9554c42b0820d53ac03bf0866f 4435224 libxalan2-java-gcj_2.7.1-5ubuntu1.1_amd64.deb
 f5dc0cc3423570bd98eaac96d4e545cecac5e4df 1577680 libxsltc-java-gcj_2.7.1-5ubuntu1.1_amd64.deb
Checksums-Sha256: 
 e7b17b1f030f1f350dd9944edb473e149acbddc2ccb3a2915da4b1c0b9548e09 3358378 libxalan2-java_2.7.1-5ubuntu1.1_amd64.deb
 576b61c7061c1fac51bb0198938891a8a2b9b8254704fa2eb82f52be7e5407d7 4435224 libxalan2-java-gcj_2.7.1-5ubuntu1.1_amd64.deb
 3c861afc062b58e280fbdd634cc027d304b2ca3a2ade53aa6bf9483e6c0923c7 1577680 libxsltc-java-gcj_2.7.1-5ubuntu1.1_amd64.deb
Files: 
 dea98818dabc66162e401895a2692909 3358378 java optional libxalan2-java_2.7.1-5ubuntu1.1_amd64.deb
 4e88714b5fe05d0ab8ba7220577c6a12 4435224 libs optional libxalan2-java-gcj_2.7.1-5ubuntu1.1_amd64.deb
 79d793476975098adfdb670b18fe40f9 1577680 libs optional libxsltc-java-gcj_2.7.1-5ubuntu1.1_amd64.deb
Original-Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>