[Bug 1253847] Re: Sync libcommons-fileupload-java 1.3-2.1 (universe) from Debian unstable (main)
Marc Deslauriers
marc.deslauriers at canonical.com
Thu Dec 12 01:29:44 UTC 2013
This bug was fixed in the package libcommons-fileupload-java - 1.3-3
Sponsored for Artur Rona (ari-tczew)
---------------
libcommons-fileupload-java (1.3-3) unstable; urgency=low
* Set the project.build.sourceEncoding property to fix a test failure
(Closes: #730970)
* Removed the Servlet and the Portlet APIs from the runtime dependencies
since they are provided by the Servlet container.
* Install the upstream changelog
* debian/control:
- Standards-Version updated to 3.9.5 (no changes)
- Use canonical URLs for the Vcs-* fields
* Switch to debhelper level 9
-- Emmanuel Bourg <ebourg at apache.org> Tue, 03 Dec 2013 08:35:15 +0100
libcommons-fileupload-java (1.3-2.1) unstable; urgency=low
* Non-maintainer upload.
* Add CVE-2013-2186.patch patch.
CVE-2013-2186: Arbitrary file upload via deserialization. Properly validate
repository in org.apache.commons.fileupload.disk.DiskFileItem.
Thanks to Marc Deslauriers <marc.deslauriers at ubuntu.com> for
providing the debdiff. (Closes: #726601)
-- Salvatore Bonaccorso <carnil at debian.org> Fri, 15 Nov 2013 15:04:17
+0100
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to libcommons-fileupload-java in
Ubuntu.
https://bugs.launchpad.net/bugs/1253847
Title:
Sync libcommons-fileupload-java 1.3-2.1 (universe) from Debian
unstable (main)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/libcommons-fileupload-java/+bug/1253847/+subscriptions
More information about the Ubuntu-server-bugs
mailing list