-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Tue, 25 Mar 2014 15:48:50 +0100 Source: libxalan2-java Binary: libxalan2-java libxalan2-java-gcj libxsltc-java libxsltc-java-gcj libxalan2-java-doc Architecture: source all amd64 Version: 2.7.1-5+deb6u1 Distribution: squeeze-security Urgency: high Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Description: libxalan2-java - XSL Transformations (XSLT) processor in Java libxalan2-java-doc - Documentation and examples for the Xalan-Java XSLT processor libxalan2-java-gcj - XSL Transformations (XSLT) processor in Java (native code) libxsltc-java - XSL Transformations (XSLT) compiler from Xalan-Java libxsltc-java-gcj - XSL Transformations (XSLT) compiler from Xalan-Java (native code) Closes: 742577 Changes: libxalan2-java (2.7.1-5+deb6u1) squeeze-security; urgency=high . * Team upload. * Fix CVE-2014-0107: Strengthen the secure processing mode by disabling external general entities, foreign attributes and access to the system properties. This could be exploited to execute arbitrary code remotely. (Closes: #742577) Checksums-Sha1: f4aa7ffe7cc6d57202823a1958030f430c270550 1965 libxalan2-java_2.7.1-5+deb6u1.dsc 4b8d46c1ba4d0e8acbb551cd30567ef164719501 17138 libxalan2-java_2.7.1-5+deb6u1.diff.gz 6cff7fbcd8a7e17f54d530c0aa8e3d8ebf772bda 3358488 libxalan2-java_2.7.1-5+deb6u1_all.deb b05e2fac04d8fa33906ec3b932adfb1d50f25d54 1300928 libxsltc-java_2.7.1-5+deb6u1_all.deb 9380c5cd92275bcdf889631ba1b398fb5f7f38eb 4812244 libxalan2-java-doc_2.7.1-5+deb6u1_all.deb e1fe54dca47202132497039c1ebbc19bb5356287 4438862 libxalan2-java-gcj_2.7.1-5+deb6u1_amd64.deb 1abf8a6816283465b055dbffcc3191cbf81f4be0 1577174 libxsltc-java-gcj_2.7.1-5+deb6u1_amd64.deb Checksums-Sha256: c420f4eb269868c4cfb21cd85b57c815714c6a77b375a200f4fcaea7ed01974e 1965 libxalan2-java_2.7.1-5+deb6u1.dsc 2df3de99e6bb439d482ad5b59b5de3e0ee30c12716da2431ba283c307f305445 17138 libxalan2-java_2.7.1-5+deb6u1.diff.gz 75c0d9123946cf70f6cc642053b4fe05b354fde39dfda20b8540f6cd354078d5 3358488 libxalan2-java_2.7.1-5+deb6u1_all.deb 26b81affd5655e2e7df099766ebb413ca7a219592288f7640cbc0ff1c2be4aa3 1300928 libxsltc-java_2.7.1-5+deb6u1_all.deb 944ec668a26486ad5fd1a8a2fe3ac9374ad33ba547f32e3965d4ac4fb3d7fdc9 4812244 libxalan2-java-doc_2.7.1-5+deb6u1_all.deb 2b2510e01f0a56b6d51223e882b4eba55999681c8258e16623c841f7da8aa247 4438862 libxalan2-java-gcj_2.7.1-5+deb6u1_amd64.deb 2b69caccff1f8db7c06fd5e37430402ae3af79e15921c403c51019b53eaed0c3 1577174 libxsltc-java-gcj_2.7.1-5+deb6u1_amd64.deb Files: 6589a629ab64d8be165c4be70697e3d5 1965 java optional libxalan2-java_2.7.1-5+deb6u1.dsc 2c2dc5d5bfe00de3ed6ec8e928d9d1b3 17138 java optional libxalan2-java_2.7.1-5+deb6u1.diff.gz 6939bdb3c9635441acb01a6ceea5aa6c 3358488 java optional libxalan2-java_2.7.1-5+deb6u1_all.deb aab265ede8565810d9fd1593f33c044d 1300928 java optional libxsltc-java_2.7.1-5+deb6u1_all.deb eea733669f06b5cae6b4c366ac25d42e 4812244 doc optional libxalan2-java-doc_2.7.1-5+deb6u1_all.deb e7bc8151fde8c87de4da68c7b5daa377 4438862 libs optional libxalan2-java-gcj_2.7.1-5+deb6u1_amd64.deb d1706f11441f8ef1d30d01094a9b3d8b 1577174 libs optional libxsltc-java-gcj_2.7.1-5+deb6u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJTMzaBAAoJEL97/wQC1SS+Td0H/1wqI/S4SGJ4UFtrLqQRfZHd xaPKwVFPcydgrucYjnRSIo2QW+AHFkUqNmtieXbWh+DwPM0CXO87DTwJEshNQhkw wqcG/Ym90w6YIDEY/by18uw6/pUf4Et/u+klBWargiVHM4W/fgwMrahalUh3kKMb dIRXnEqIwL1KoEfftL8TOJhRqgKW6L7anqEhYqET5KPrfg0Jp/L50wXGL3DZ9hlt fe+fewxMjKrDswG7EJi72Dp/Wf5QNyVY6KyGG3NRjtNr7u2Nt36Yg31nvNiFUAW6 vHbEcvYG+h6pmLJqx76EojWizVitJBaUmzZvw6IAu6K4y/L/1QwzmgjIuGqDyJ0= =pQDA -----END PGP SIGNATURE-----