tocsin

Debian/libxml-security-java: medium 6.5

All versions of Apache Santuario - XML Security for Java prior to 2.2.6, 2.3.4, and 3.0.3, when using the JSR 105 API, are vulnerable to an issue where a private key may be disclosed in log files when

Action: Upgrade libxml-security-java to 2.1.8-1.1 or later.

Affected

introducedfixedlast affected
02.1.8-1.1-

Fixed versions

2.1.8-1.1

Sources

published · modified · JSON