[ubuntu/lucid-security] libcommons-fileupload-java 1.2.1-3ubuntu2.1 (Accepted)

[Marc Deslauriers]

libcommons-fileupload-java (1.2.1-3ubuntu2.1) lucid-security; urgency=low

  * SECURITY UPDATE: arbitrary file overwrite via poison null byte
    - debian/patches/05_CVE-2013-2186.patch: properly validate repository
      in src/java/org/apache/commons/fileupload/disk/DiskFileItem.java.
    - CVE-2013-2186

Date: 2013-11-08 15:24:17.220470+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/lucid/+source/libcommons-fileupload-java/1.2.1-3ubuntu2.1
-------------- next part --------------
Sorry, changesfile not available.