Ubuntu
libcommons-net-java package

libcommons-net-java 3.6-1+deb11u1build0.18.04.1 source package in Ubuntu

Changelog

libcommons-net-java (3.6-1+deb11u1build0.18.04.1) bionic-security; urgency=medium

  * fake sync from Debian

libcommons-net-java (3.6-1+deb11u1) bullseye-security; urgency=high

  * Non-maintainer upload by the LTS team.
  * Fix CVE-2021-37533:
    ZeddYu Lu discovered that the FTP client of Apache Commons Net, a Java
    client API for basic Internet protocols, trusts the host from PASV response
    by default. A malicious server can redirect the Commons Net code to use a
    different host, but the user has to connect to the malicious server in the
    first place. This may lead to leakage of information about services running
    on the private network of the client. (Closes: #1025910)

 -- George-Andrei Iosif <email address hidden>  Thu, 20 Apr 2023 14:45:05 +0300

Upload details

Uploaded by:
George-Andrei Iosif
Uploaded to:
Bionic
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Bionic updates universe misc
Bionic security universe misc

Builds

Bionic: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libcommons-net-java_3.6.orig.tar.xz 300.6 KiB 7eee0e4ac4905c84b5c585a6785cdf9c87b89502f608059b2e766c92f60c4811
libcommons-net-java_3.6-1+deb11u1build0.18.04.1.debian.tar.xz 7.0 KiB 830f963d6b4449fc758c8f5f036df64d3b25b3c6e6e36b73616ec5ed0d0fa0a6
libcommons-net-java_3.6-1+deb11u1build0.18.04.1.dsc 2.5 KiB ea9e031109b470cabbca34140d6e61e1db47a9c379934c356d410c95e8e39e8b

View changes file

Binary packages built by this source

libcommons-net-java: Apache Commons Net - Java client API for basic Internet protocols

 The Apache Commons Net library implements the client side of many basic
 Internet protocols. The purpose of the library is to provide fundamental
 protocol access, not higher-level abstractions. Therefore, some of the
 design violates object-oriented design principles. The philosophy is to
 make the global functionality of a protocol accessible (e.g., TFTP send
 file and receive file) when possible, but also provide access to the
 fundamental protocols where applicable so that a programmer may construct
 his own custom implementations (e.g, the TFTP packet classes and the TFTP
 packet send and receive methods are exposed).
 .
 The supported protocols include:
  * FTP/FTPS
  * FTP over HTTP (experimental)
  * NNTP
  * SMTP(S)
  * POP3(S)
  * IMAP(S)
  * Telnet
  * TFTP
  * Finger
  * Whois
  * rexec/rcmd/rlogin
  * Time (rdate) and Daytime
  * Echo
  * Discard
  * NTP/SNTP

libcommons-net-java-doc: Apache Commons Net (API documentation)

 The Apache Commons Net library implements the client side of many basic
 Internet protocols. The purpose of the library is to provide fundamental
 protocol access, not higher-level abstractions. Therefore, some of the
 design violates object-oriented design principles. The philosophy is to
 make the global functionality of a protocol accessible (e.g., TFTP send
 file and receive file) when possible, but also provide access to the
 fundamental protocols where applicable so that a programmer may construct
 his own custom implementations (e.g, the TFTP packet classes and the TFTP
 packet send and receive methods are exposed).
 .
 This package contains the API documentation for libcommons-net-java.