[jira] [Commented] (FOP-2547) Security: update the Xalan version shipped with FOP

2015-12-02 Thread Brian Martin (JIRA) 

[ 
https://issues.apache.org/jira/browse/FOP-2547?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15036210#comment-15036210
 ] 

Brian Martin commented on FOP-2547:
---

Please use the 'Affects Version/s' fields.

> Security: update the Xalan version shipped with FOP
> ---
>
> Key: FOP-2547
> URL: https://issues.apache.org/jira/browse/FOP-2547
> Project: FOP
>  Issue Type: Bug
>Reporter: Lars Teuber
>Priority: Critical
>  Labels: security
>
> There is a security issue in Xalan < 2.7.2, see:
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0107



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

[jira] [Commented] (FOP-2547) Security: update the Xalan version shipped with FOP

2016-01-24 Thread Brian Martin (JIRA) 

[ 
https://issues.apache.org/jira/browse/FOP-2547?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=15114562#comment-15114562
 ] 

Brian Martin commented on FOP-2547:
---

And fixed in 2.1 per changelog, thanks!

> Security: update the Xalan version shipped with FOP
> ---
>
> Key: FOP-2547
> URL: https://issues.apache.org/jira/browse/FOP-2547
> Project: FOP
>  Issue Type: Bug
>Affects Versions: 2.0
>Reporter: Lars Teuber
>Assignee: simon steiner
>Priority: Critical
>  Labels: security
>
> There is a security issue in Xalan < 2.7.2, see:
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0107



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)