lp:ubuntu/lucid-security/libxalan2-java

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

8. By Marc Deslauriers on 2014-03-31

* SECURITY UPDATE: information disclosure or arbitrary code execution via
  crafted XSLT programs
  - debian/patches/CVE-2014-0107.patch: disable external general
    entities, foreign attributes and access to the system properties in
    src/org/apache/xalan/transformer/TransformerImpl.java,
    src/org/apache/xalan/processor/XSLTElementProcessor.java,
    src/org/apache/xalan/processor/TransformerFactoryImpl.java,
    src/org/apache/xpath/functions/FuncSystemProperty.java.
  - CVE-2014-0107

7. By Matthias Klose on 2009-10-18

* Merge with Debian; remaining changes:
  - debian/control: Only suggest libxalan2-java-gcj on selected architectures,
    and libxalan2-java architecture "any" to have it work (LP: #386307).

6. By Thierry Carrez on 2009-08-14

debian/control: Only suggest libxalan2-java-gcj on selected architectures,
and libxalan2-java architecture "any" to have it work (LP: #386307)

5. By Michael Koch on 2008-04-27

* Build-Depends on default-jdk-builddep. Closes: #477893
* Clarified debian/copyright.
* Don't use '-1' in Build-Depends.
* Updated watch file to match upstream correctly.

4. By Marcus Better on 2006-10-17

* debian/rules: Also install serializer.jar. (Closes: #390148)
* debian/control: Added myself as uploader.
* debian/control: Changed duplicate Build-Depends-Indep to Build-Depends.
* Bumped compatibility level to 5.

3. By Stefan Gybas <email address hidden> on 2004-03-14

* New upstream release
* Don't ship xml-apis.jar any longer since its contents are equal to
  xmlParserAPIs.jar from libxerces2-java
* Use Xerces 2.0 Ant 1.6 during build
* Don't install versioned JARs in /usr/share/java since this package has
  no API itself

2. By Ola Lundqvist on 2001-04-16

Initial Release, closes: #90452.

1. By Ola Lundqvist on 2001-04-16

Import upstream version 2.0.1