Ubuntu
commons-httpclient package

commons-httpclient 3.1-10.2ubuntu0.15.04.1 source package in Ubuntu

Changelog

commons-httpclient (3.1-10.2ubuntu0.15.04.1) vivid-security; urgency=medium

  * SECURITY UPDATE: improper certificate hostname verification
    - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
      src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
    - CVE-2014-3577
  * SECURITY UPDATE: denial of service via failure to set socket timeout
    - debian/patches/CVE-2015-5262.patch: respect configured timeout in
      src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
    - CVE-2015-5262
  * debian/ant.properties: bump version to 1.5 to handle security fixes.

 -- Marc Deslauriers <email address hidden>  Thu, 01 Oct 2015 08:51:52 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Vivid
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Vivid: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
commons-httpclient_3.1.orig.tar.gz 1.8 MiB f9a496d3418b0e15894fb351652cd4fa5ca434ebfc3ce3bb8da40defd8b097f2
commons-httpclient_3.1-10.2ubuntu0.15.04.1.debian.tar.xz 12.4 KiB d655b94cec079973f7f3917b83d860248779fb66571c3cab1217de26a2c52e79
commons-httpclient_3.1-10.2ubuntu0.15.04.1.dsc 2.5 KiB 68e0df67bfb687994e0b84b0dd8d5a37158bfa201cc55da1e2cbb72f048e08bd

View changes file

Binary packages built by this source

libcommons-httpclient-java: No summary available for libcommons-httpclient-java in ubuntu vivid.

No description available for libcommons-httpclient-java in ubuntu vivid.

libcommons-httpclient-java-doc: No summary available for libcommons-httpclient-java-doc in ubuntu vivid.

No description available for libcommons-httpclient-java-doc in ubuntu vivid.