[Bug 180530] [Sync request] Sync libjfreechart-java (1.0.9-1) from Debian unstable (main)

Michael Bienia michael at vorlon.ping.de
Sat Jan 5 12:14:34 GMT 2008


Public bug reported:

Binary package hint: libjfreechart-java

Please sync libjfreechart-java (1.0.9-1) from Debian unstable (main).

Changelog since libjfreechart-java 1.0.8-1:

libjfreechart-java (1.0.9-1) unstable; urgency=high

  [ Varun Hiremath ]
  * New upstream release
  * This release fixes the following security issue:
    + Multiple cross-site scripting vulnerabilities in the image map
    feature allow remote attackers to inject arbitrary web script or HTML
    via several attributes (CVE-2007-6306; Closes: #456148).
  * Fix debian/watch to include letters also in upstream version.
  * Make some minor fixes in debian/orig-tar.sh file.
  * debian/control: Bumped up Standards-Version to 3.7.3

  [ Michael Koch ]
  * Use uscan SourceForge helper in watch file.

 -- Varun Hiremath <varun at debian.org>  Sat, 05 Jan 2008 01:08:58 +0530

** Affects: libjfreechart-java (Ubuntu)
     Importance: Wishlist
         Status: Confirmed

** Changed in: libjfreechart-java (Ubuntu)
   Importance: Undecided => Wishlist
       Status: New => Confirmed

-- 
[Sync request] Sync libjfreechart-java (1.0.9-1) from Debian unstable (main)
https://bugs.launchpad.net/bugs/180530
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a direct subscriber.



More information about the ubuntu-archive mailing list