[Bug 1433365] Re: Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable (main)

Launchpad Bug Tracker 1433365 at bugs.launchpad.net
Fri Mar 20 16:22:15 UTC 2015


This bug was fixed in the package jakarta-taglibs-standard -
1.1.2-3ubuntu1

---------------
jakarta-taglibs-standard (1.1.2-3ubuntu1) vivid; urgency=low

  * Merge from Debian unstable. (LP: #1433365) Remaining changes:
    - debian/ant.properties, debian/control, debian/rules:
      + Transition from servlet 2.5 -> 3.0. (Closes: #780701)

jakarta-taglibs-standard (1.1.2-3) unstable; urgency=high

  * Team upload.
  * Fix CVE-2015-0254 XXE and RCE via XSL extension in JSTL XML tags:
    - Introduce new patch: d/patches/CVE-2015-0254.patch.
    - Adjust source and target JVM parameters to 1.5.
    (Closes: #779621).
 -- Artur Rona <ari-tczew at ubuntu.com>   Wed, 18 Mar 2015 01:11:43 +0100

** Changed in: jakarta-taglibs-standard (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to jakarta-taglibs-standard in Ubuntu.
https://bugs.launchpad.net/bugs/1433365

Title:
  Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable
  (main)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/jakarta-taglibs-standard/+bug/1433365/+subscriptions



More information about the Ubuntu-server-bugs mailing list