[ubuntu/noble-updates] libowasp-esapi-java 2.4.0.0-2ubuntu0.1 (Accepted)
Ubuntu Archive Robot
ubuntu-archive-robot at lists.canonical.com
Thu Apr 16 19:58:21 UTC 2026
libowasp-esapi-java (2.4.0.0-2ubuntu0.1) noble-security; urgency=medium
* SECURITY UPDATE: Improper SQL special-element neutralization
- debian/patches/CVE-2025-5878.patch: Deprecate SQL encodings in
src/main/java/org/owasp/esapi/Encoder.java,
src/main/java/org/owasp/esapi/codecs/DB2Codec.java,
src/main/java/org/owasp/esapi/codecs/MySQLCodec.java,
src/main/java/org/owasp/esapi/codecs/OracleCodec.java and
src/main/java/org/owasp/esapi/reference/DefaultEncoder.java
- CVE-2025-5878
Date: 2026-04-15 20:12:17.664743+00:00
Changed-By: Shafayat Hossain Majumder <shafayat.majumder at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libowasp-esapi-java/2.4.0.0-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the noble-changes
mailing list