libxml-security-java (1.4.3-2ubuntu0.1) lucid-security; urgency=low
* SECURITY UPDATE: XML signature spoofing via CanonicalizationMethod
parameter
- src/org/jcp/xml/dsig/internal/dom/DOMCanonicalizationMethod.java:
don't allow non-standard c14n method.
- http://svn.apache.org/viewvc?view=revision&revision=1493772
- CVE-2013-2172
Date: 2013-09-10 16:07:15.575169+00:00
Changed-By: Marc Deslauriers <marc.deslauri...@canonical.com>
Signed-By: Ubuntu Archive Robot
<cjwatson+ubuntu-archive-ro...@chiark.greenend.org.uk>
https://launchpad.net/ubuntu/lucid/+source/libxml-security-java/1.4.3-2ubuntu0.1
Sorry, changesfile not available.
--
Lucid-changes mailing list
Lucid-changes@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/lucid-changes