UbuntuUpdates.org

Package "libjstl1.1-java"

Name: libjstl1.1-java

Description:

JSP Standard Tag Library API v1.1 Reference Implementation

Latest version: 1.1.2-2ubuntu1.14.04.1
Release: trusty (14.04)
Level: security
Repository: main
Head package: jakarta-taglibs-standard
Homepage: http://tomcat.apache.org/taglibs/standard/

Links


Download "libjstl1.1-java"


Other versions of "libjstl1.1-java" in Trusty

Repository Area Version
base main 1.1.2-2ubuntu1
updates main 1.1.2-2ubuntu1.14.04.1

Changelog

Version: 1.1.2-2ubuntu1.14.04.1 2015-03-30 18:06:25 UTC

  jakarta-taglibs-standard (1.1.2-2ubuntu1.14.04.1) trusty-security; urgency=medium

  * SECURITY UPDATE: abitrary code execution and XXE attacks
    - debian/patches/CVE-2015-0254.patch: thanks to Debian for the patch
      backport.
    - debian/ant.properties: bump source and target to 1.5.
    - CVE-2015-0254
 -- Marc Deslauriers <email address hidden> Tue, 24 Mar 2015 12:23:11 -0400

CVE-2015-0254 Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crafted XSL



About   -   Send Feedback to @ubuntu_updates