[ubuntu/noble-updates] libowasp-esapi-java 2.4.0.0-2ubuntu0.1 (Accepted)

Ubuntu Archive Robot ubuntu-archive-robot at lists.canonical.com
Thu Apr 16 19:58:21 UTC 2026


libowasp-esapi-java (2.4.0.0-2ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Improper SQL special-element neutralization
    - debian/patches/CVE-2025-5878.patch: Deprecate SQL encodings in
      src/main/java/org/owasp/esapi/Encoder.java,
      src/main/java/org/owasp/esapi/codecs/DB2Codec.java,
      src/main/java/org/owasp/esapi/codecs/MySQLCodec.java,
      src/main/java/org/owasp/esapi/codecs/OracleCodec.java and
      src/main/java/org/owasp/esapi/reference/DefaultEncoder.java
    - CVE-2025-5878

Date: 2026-04-15 20:12:17.664743+00:00
Changed-By: Shafayat Hossain Majumder <shafayat.majumder at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/libowasp-esapi-java/2.4.0.0-2ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.


More information about the noble-changes mailing list