Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2019.1451
[DLA 1768-1] checkstyle security update
29 April 2019
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: checkstyle
Publisher: Debian
Operating System: Debian GNU/Linux 8
Impact/Access: Access Confidential Data -- Remote/Unauthenticated
Resolution: Patch/Upgrade
CVE Names: CVE-2019-9658
Original Bulletin:
https://lists.debian.org/debian-lts-announce/2019/04/msg00029.html
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package : checkstyle
Version : 5.9-1+deb8u1
CVE ID : CVE-2019-9658
checkstyle was loading external DTDs by default,
which is now disabled by default.
If needed it can be re-enabled by setting the system property
checkstyle.enableExternalDtdLoad to true.
For Debian 8 "Jessie", this problem has been fixed in version
5.9-1+deb8u1.
We recommend that you upgrade your checkstyle packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
- -----BEGIN PGP SIGNATURE-----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=P7xe
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBXMaBpGaOgq3Tt24GAQiioA/+Mt1BjsQRG+0fXCyiP/MJqoHUFdyLbK29
KmJkY2qJldvVgB+kDIZD56eImcjqHQQYyCZQ2fy6I9LWNYirIQJ3bmEbfctyxqsV
X2t20JN/gueTo3LCDz0igHeaKJQvoMffe4h9ZcjBIZbyo7TYxV2luNvNlw7va1qY
6mC+yrqrS2QZ59v/Dvspq9gfx4awcGj8hJBIFssvBZ3Bh2JX0x90qn1uI5Xq//WQ
j6tZh5b5MibYa6agzYhyKC0ryiqHfX+SBFfv2hEcNH9aLcnfm1f5Y9qbfhp6q3tH
mDtg+tqO+gS5o6DGFCv/cYhcfP+a+s9JlSVHRVJYrRE0YbjAE2TpkltrjoU1KDDf
7CHXQDZn2P1Il9fE6WV0ZAzfcc0q1Crkk20oKtFk/Efk0Zh9zJRoOC2ZgZAO65Am
y/hDL3PpMf26HO5/+9pDjUZRT0x4fdOvDSX6RBwP9UzvYozrEgtRmDPyyZd84kpE
OzVSIgVWtDjvXXNxYZjV+IoarkFeJFh5YemTQnCBwzXuSS0uidrBbqx9U9Tpa0db
YvDFkb1Y7zviUHEGtY7XGruqidRP6/DqJojEiSqIJ2VJWckFbsoHSOD+exmLWgz/
0v3QXXw4y9jKdAGyd2/ggfAukS9MYIGnySu9StZGtxj2Le0mnDH2j8GYLEkhATHS
GeZeNAqio2s=
=2MgI
-----END PGP SIGNATURE-----