[Bug 1253847] Re: Sync libcommons-fileupload-java 1.3-2.1 (universe) from Debian unstable (main)

Marc Deslauriers marc.deslauriers at canonical.com
Thu Dec 12 01:29:44 UTC 2013


This bug was fixed in the package libcommons-fileupload-java - 1.3-3
Sponsored for Artur Rona (ari-tczew)

---------------
libcommons-fileupload-java (1.3-3) unstable; urgency=low

  * Set the project.build.sourceEncoding property to fix a test failure
    (Closes: #730970)
  * Removed the Servlet and the Portlet APIs from the runtime dependencies
    since they are provided by the Servlet container.
  * Install the upstream changelog
  * debian/control:
    - Standards-Version updated to 3.9.5 (no changes)
    - Use canonical URLs for the Vcs-* fields
  * Switch to debhelper level 9

 -- Emmanuel Bourg <ebourg at apache.org>  Tue, 03 Dec 2013 08:35:15 +0100

libcommons-fileupload-java (1.3-2.1) unstable; urgency=low

  * Non-maintainer upload.
  * Add CVE-2013-2186.patch patch.
    CVE-2013-2186: Arbitrary file upload via deserialization. Properly validate
    repository in org.apache.commons.fileupload.disk.DiskFileItem.
    Thanks to Marc Deslauriers <marc.deslauriers at ubuntu.com> for
    providing the debdiff. (Closes: #726601)

 -- Salvatore Bonaccorso <carnil at debian.org>  Fri, 15 Nov 2013 15:04:17
+0100

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libcommons-fileupload-java in
Ubuntu.
https://bugs.launchpad.net/bugs/1253847

Title:
  Sync libcommons-fileupload-java 1.3-2.1 (universe) from Debian
  unstable (main)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libcommons-fileupload-java/+bug/1253847/+subscriptions



More information about the Ubuntu-server-bugs mailing list