Ubuntu
c3p0 package

Change logs for c3p0 source package in Focal

  1. Focal (20.04)
  2. Change log 
  • c3p0 (0.9.1.2-10ubuntu0.20.04.1) focal-security; urgency=medium

  * SECURITY UPDATE: Billion laughs attacks in XML parsing
    - debian/patches/CVE-2019-5427.patch: Enable a wide variety of
      restrictions on XML parsing by default
    - CVE-2019-5427

 -- Spyros Seimenis <email address hidden>  Mon, 21 Feb 2022 15:29:11 +0200
  • c3p0 (0.9.1.2-10) unstable; urgency=medium

  * Team upload.

  [ tony mancill ]
  * Moved the package to Git.

  [ Markus Koschany ]
  * Switch to compat level 10.
  * Use https for Format field.
  * Declare compliance with Debian Policy 4.3.0.
  * Use canonical VCS URI.
  * Rename README.Debian-source to README.source
  * Fix CVE-2018-20433.
    Thanks to Salvatore Bonaccorso for the report. (Closes: #917257)
  * Install the documentation into canonical directory.

 -- Markus Koschany <email address hidden>  Tue, 25 Dec 2018 15:16:25 +0100