diff -Nru libcommons-fileupload-java-1.2.2/debian/changelog libcommons-fileupload-java-1.2.2/debian/changelog --- libcommons-fileupload-java-1.2.2/debian/changelog 2013-11-07 14:48:22.000000000 +0000 +++ libcommons-fileupload-java-1.2.2/debian/changelog 2013-11-15 17:03:34.000000000 +0000 @@ -1,3 +1,14 @@ +libcommons-fileupload-java (1.2.2-1ubuntu0.12.04.2) precise-security; urgency=low + + * SECURITY REGRESSION: missing jar file (LP: #1251340) + - debian/libcommons-fileupload-java.poms: maven-debian-helper 1.5 in + precise doesn't automatically install to /usr/share/java unless the + --java-lib option is specified in the .poms file. The package had + not been rebuilt in the archive since that change, introducing a + regression in the security update. + + -- Marc Deslauriers Fri, 15 Nov 2013 12:00:34 -0500 + libcommons-fileupload-java (1.2.2-1ubuntu0.12.04.1) precise-security; urgency=low * SECURITY UPDATE: arbitrary file overwrite via poison null byte diff -Nru libcommons-fileupload-java-1.2.2/debian/libcommons-fileupload-java.poms libcommons-fileupload-java-1.2.2/debian/libcommons-fileupload-java.poms --- libcommons-fileupload-java-1.2.2/debian/libcommons-fileupload-java.poms 2010-03-30 23:02:11.000000000 +0000 +++ libcommons-fileupload-java-1.2.2/debian/libcommons-fileupload-java.poms 2013-11-15 17:03:24.000000000 +0000 @@ -1 +1 @@ -pom.xml --no-parent +pom.xml --no-parent --java-lib