Ubuntu
commons-httpclient package

commons-httpclient 3.1-11 source package in Ubuntu

Changelog

commons-httpclient (3.1-11) unstable; urgency=high


  * Team upload.
  * Add CVE-2014-3577.patch. (Closes: #758086)
    It was found that the fix for CVE-2012-6153 was incomplete: the code added
    to check that the server hostname matches the domain name in a subject's
    Common Name (CN) field in X.509 certificates was flawed. A
    man-in-the-middle attacker could use this flaw to spoof an SSL server using
    a specially crafted X.509 certificate. The fix for CVE-2012-6153 was
    intended to address the incomplete patch for CVE-2012-5783. The issue is
    now completely resolved by applying this patch and the
    06_fix_CVE-2012-5783.patch.
  * Change java.source and java.target ant properties to 1.5, otherwise
    commons-httpclient will not compile with this patch.

 -- Markus Koschany <email address hidden>  Mon, 23 Mar 2015 22:57:54 +0100

Upload details

Uploaded by:
Debian Java Maintainers
Uploaded to:
Sid
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
libs
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section

Builds

Wily: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
commons-httpclient_3.1-11.dsc 2.0 KiB 81b0cbe1b1804c5c43cac7d089ba9ca65fe971ef3015602c8c790193a87eb3a6
commons-httpclient_3.1.orig.tar.gz 1.8 MiB f9a496d3418b0e15894fb351652cd4fa5ca434ebfc3ce3bb8da40defd8b097f2
commons-httpclient_3.1-11.debian.tar.xz 12.2 KiB 51feecd75226900f90e52eaa2b3660579b0e734740ef07cffb8f1a6c3db9aaeb

Available diffs

No changes file available.

Binary packages built by this source

libcommons-httpclient-java: No summary available for libcommons-httpclient-java in ubuntu wily.

No description available for libcommons-httpclient-java in ubuntu wily.

libcommons-httpclient-java-doc: No summary available for libcommons-httpclient-java-doc in ubuntu wily.

No description available for libcommons-httpclient-java-doc in ubuntu wily.