[Bug 1433365] [NEW] Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable (main)

Artur Rona ari-tczew at tlen.pl
Wed Mar 18 00:11:15 UTC 2015


Public bug reported:

jakarta-taglibs-standard (1.1.2-3) unstable; urgency=high

  * Team upload.
  * Fix CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags:
    - Introduce new patch: d/patches/CVE-2015-0254.patch.
    - Adjust source and target JVM parameters to 1.5.
    (Closes: #779621).

** Affects: jakarta-taglibs-standard (Ubuntu)
     Importance: Medium
         Status: Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to jakarta-taglibs-standard in Ubuntu.
https://bugs.launchpad.net/bugs/1433365

Title:
  Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable
  (main)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/jakarta-taglibs-standard/+bug/1433365/+subscriptions



More information about the Ubuntu-server-bugs mailing list