Ubuntu Security Notice 5525-1 - It was discovered that Apache XML Security for Java incorrectly passed a configuration property when creating specific key elements. This allows an attacker to abuse an XPath Transform to extract sensitive information.
5a7567c51fc5535217fe76db85a30037524b5faac7d584fbe7e0d988cc43929b