[libspring-java] 02/02: Update changelog for stable-security release.

Markus Koschany apo-guest at moszumanska.debian.org
Thu Dec 5 12:57:19 UTC 2013


This is an automated email from the git hooks/post-receive script.

apo-guest pushed a commit to branch stable-security
in repository libspring-java.

commit fa1fc07e9844b6effa38255412199605b8ef98a3
Author: Markus Koschany <apo at gambaru.de>
Date:   Thu Dec 5 11:32:46 2013 +0100

    Update changelog for stable-security release.
---
 debian/changelog | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/debian/changelog b/debian/changelog
index e41a449..b6276cb 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,17 @@
+libspring-java (3.0.6.RELEASE-6+deb7u1) stable-security; urgency=low
+
+  * Team upload.
+  * Fix CVE-2013-4152.
+    - New patch: Add-processExternalEntities-to-JAXB2Marshaller.patch.
+    - Now by default external XML entities are not processed when
+      unmarshalling. Processing of external entities will only be
+      enabled/disabled when the source passed to the unmarshaller is a
+      SAXSource or StreamSource. It has no effect for DOMSource or StAXSource
+      instances.
+    - (Closes: #720902)
+
+ -- Markus Koschany <apo at gambaru.de>  Thu, 05 Dec 2013 11:12:22 +0100
+
 libspring-java (3.0.6.RELEASE-6) unstable; urgency=low
 
   * Add optional B-D on openjdk-7-jdk.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-java/libspring-java.git



More information about the pkg-java-commits mailing list