[Bug 1433365] Re: Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable (main)

[Launchpad Bug Tracker]

** Branch linked: lp:~ubuntu-branches/ubuntu/vivid/jakarta-taglibs-
standard/vivid-proposed

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1433365

Title:
  Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable
  (main)

Status in jakarta-taglibs-standard package in Ubuntu:
  Confirmed

Bug description:
  jakarta-taglibs-standard (1.1.2-3) unstable; urgency=high

    * Team upload.
    * Fix CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags:
      - Introduce new patch: d/patches/CVE-2015-0254.patch.
      - Adjust source and target JVM parameters to 1.5.
      (Closes: #779621).

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/jakarta-taglibs-standard/+bug/1433365/+subscriptions