Ubuntu
libxml-security-java package

libxml-security-java 2.0.10-2~18.04.1 source package in Ubuntu

Changelog

libxml-security-java (2.0.10-2~18.04.1) bionic-security; urgency=medium

  * SECURITY UPDATE: XPath Transform
    - debian/patches/CVE-2021-40690.patch: Apache Santuario - XML Security for
      Java is vulnerable to an issue where the "secureValidation" property is
      not passed correctly when creating a KeyInfo from a KeyInfoReference
      element. This allows an attacker to abuse an XPath Transform to extract
      any local .xml files in a RetrievalMethod element.
    - CVE-2021-40690

 -- Fabian Toepfer <email address hidden>  Wed, 13 Jul 2022 13:56:56 +0200

Upload details

Uploaded by:
Fabian Toepfer
Uploaded to:
Bionic
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates universe libs
Bionic security universe libs

Builds

Bionic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libxml-security-java_2.0.10.orig.tar.xz 781.7 KiB 0f205c2e911e2b4a706d336d4b117beb1e416a272ec18bd77505f68bd000d158
libxml-security-java_2.0.10-2~18.04.1.debian.tar.xz 9.6 KiB 013f76da29316a425e5364798b01d6e31622cf9c458a6054e6ac5c7a43eb324b
libxml-security-java_2.0.10-2~18.04.1.dsc 2.6 KiB cbbd3fbb66fba6f9450ed9dda8745f8583426926af22555ff128e639e505463b

View changes file

Binary packages built by this source

libxml-security-java: Apache Santuario -- XML Security for Java

 Apache Santuario supports XML-Signature Syntax and Processing, W3C
 Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C
 Recommendation 10 December 2002. As of version 1.4, the Java library supports
 the standard Java API JSR-105: XML Digital Signature APIs.

libxml-security-java-doc: Documentation for Apache Santuario

 Apache Santuario supports XML-Signature Syntax and Processing, W3C
 Recommendation 12 February 2002, and XML Encryption Syntax and Processing, W3C
 Recommendation 10 December 2002. As of version 1.4, the Java library supports
 the standard Java API JSR-105: XML Digital Signature APIs.
 .
 This package contains the API documentation of libxml-security-java.