lp:ubuntu/lucid-updates/libxalan2-java
- Get this branch:
- bzr branch lp:ubuntu/lucid-updates/libxalan2-java
Branch merges
Branch information
Recent revisions
- 8. By Marc Deslauriers
-
* SECURITY UPDATE: information disclosure or arbitrary code execution via
crafted XSLT programs
- debian/patches/ CVE-2014- 0107.patch: disable external general
entities, foreign attributes and access to the system properties in
src/org/apache/ xalan/transform er/TransformerI mpl.java,
src/org/apache/ xalan/processor /XSLTElementPro cessor. java,
src/org/apache/ xalan/processor /TransformerFac toryImpl. java,
src/org/apache/ xpath/functions /FuncSystemProp erty.java.
- CVE-2014-0107 - 7. By Matthias Klose
-
* Merge with Debian; remaining changes:
- debian/control: Only suggest libxalan2-java-gcj on selected architectures,
and libxalan2-java architecture "any" to have it work (LP: #386307). - 6. By Thierry Carrez
-
debian/control: Only suggest libxalan2-java-gcj on selected architectures,
and libxalan2-java architecture "any" to have it work (LP: #386307) - 5. By Michael Koch
-
* Build-Depends on default-
jdk-builddep. Closes: #477893
* Clarified debian/copyright.
* Don't use '-1' in Build-Depends.
* Updated watch file to match upstream correctly. - 4. By Marcus Better
-
* debian/rules: Also install serializer.jar. (Closes: #390148)
* debian/control: Added myself as uploader.
* debian/control: Changed duplicate Build-Depends-Indep to Build-Depends.
* Bumped compatibility level to 5. - 3. By Stefan Gybas <email address hidden>
-
* New upstream release
* Don't ship xml-apis.jar any longer since its contents are equal to
xmlParserAPIs.jar from libxerces2-java
* Use Xerces 2.0 Ant 1.6 during build
* Don't install versioned JARs in /usr/share/java since this package has
no API itself
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:ubuntu/utopic/libxalan2-java