Ubuntu Security Notice 2218-1 - Nicolas Gregoire discovered that Xalan-Java incorrectly handled certain properties when the secure processing feature was enabled. An attacker could possibly use this issue to load arbitrary classes or access external resources.
1323147313066b484ee5b52d71d153ee6004625cdbbfd1832e83c4fe24e53415