Ubuntu
jakarta-taglibs-standard package

Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable (main)

Bug #1433365 reported by Artur Rona on 2015-03-18
260
This bug affects 1 person
Affects Status Importance Assigned to Milestone
​ jakarta-taglibs-standard (Ubuntu)
Fix Released
Medium
Unassigned
Also affects project (?) Also affects distribution/package Nominate for series

Bug Description

jakarta-taglibs-standard (1.1.2-3) unstable; urgency=high

  * Team upload.
  * Fix CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags:
    - Introduce new patch: d/patches/CVE-2015-0254.patch.
    - Adjust source and target JVM parameters to 1.5.
    (Closes: #779621).

Artur Rona (ari-tczew) wrote :
Artur Rona (ari-tczew) wrote :
Changed in jakarta-taglibs-standard (Ubuntu):
importance: Undecided → Medium
status: New → Confirmed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package jakarta-taglibs-standard - 1.1.2-3ubuntu1

---------------
jakarta-taglibs-standard (1.1.2-3ubuntu1) vivid; urgency=low

  * Merge from Debian unstable. (LP: #1433365) Remaining changes:
    - debian/ant.properties, debian/control, debian/rules:
      + Transition from servlet 2.5 -> 3.0. (Closes: #780701)

jakarta-taglibs-standard (1.1.2-3) unstable; urgency=high

  * Team upload.
  * Fix CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags:
    - Introduce new patch: d/patches/CVE-2015-0254.patch.
    - Adjust source and target JVM parameters to 1.5.
    (Closes: #779621).
 -- Artur Rona <email address hidden> Wed, 18 Mar 2015 01:11:43 +0100

Changed in jakarta-taglibs-standard (Ubuntu):
status: Confirmed → Fix Released
Mathew Hodson (mathew-hodson) on 2015-03-31
information type: Public → Public Security
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.
Subscribing...

Other bug subscribers