Ubuntu
commons-httpclient package

commons-httpclient 3.1-10ubuntu0.1 source package in Ubuntu

Changelog

commons-httpclient (3.1-10ubuntu0.1) precise-security; urgency=medium

  * SECURITY UPDATE: improper certificate hostname verification
    - debian/patches/06_fix_CVE-2012-5783.patch: fix CN extraction and
      wildcard verification in
      src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
    - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
      src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
    - CVE-2012-5783
    - CVE-2012-6153
    - CVE-2014-3577
  * SECURITY UPDATE: denial of service via failure to set socket timeout
    - debian/patches/CVE-2015-5262.patch: respect configured timeout in
      src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
    - CVE-2015-5262
  * debian/ant.properties: bump version to 1.5 to handle security fixes.

 -- Marc Deslauriers <email address hidden>  Thu, 01 Oct 2015 09:05:17 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Precise updates main misc
Precise security main misc

Builds

Precise: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
commons-httpclient_3.1.orig.tar.gz 1.8 MiB f9a496d3418b0e15894fb351652cd4fa5ca434ebfc3ce3bb8da40defd8b097f2
commons-httpclient_3.1-10ubuntu0.1.debian.tar.gz 13.7 KiB 7b0b7567490dfbe633b275b5c43bec750e718728f30b955cf5bf4d14eab2a2d7
commons-httpclient_3.1-10ubuntu0.1.dsc 2.4 KiB 193aea1aa4c1bcb1ec6107c6dd860e388d07212f8caa36ce8e6fb341e1573d6e

View changes file

Binary packages built by this source

libcommons-httpclient-java: A Java(TM) library for creating HTTP clients

 The Jakarta Commons HTTPClient library provides an efficient,
 up-to-date, and feature-rich package implementing the client side of
 the most recent HTTP standards and recommendations.

libcommons-httpclient-java-doc: Documentation for libcommons-httpclient-java

 The Jakarta Commons HTTPClient library provides an efficient,
 up-to-date, and feature-rich package implementing the client side of
 the most recent HTTP standards and recommendations.
 ..
 This package contains the documentation for the Jakarta Commons
 HTTPClient library.