Debian/libxalan2-java: unknown
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass expe
Action: Upgrade libxalan2-java to 2.7.1-9 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1-9 | - |
Fixed versions
| 2.7.1-9 |
Sources
- osv: DEBIAN-CVE-2014-0107#Debian:13/libxalan2-java
- https://security-tracker.debian.org/tracker/CVE-2014-0107
published · modified · JSON