Ubuntu
httpcomponents-client package

httpcomponents-client 4.3.3-1ubuntu0.1 source package in Ubuntu

Changelog

httpcomponents-client (4.3.3-1ubuntu0.1) trusty-security; urgency=medium

  * SECURITY UPDATE: It was found that the fix for CVE-2012-5783
    and CVE-2012-6153 was incomplete. The code added to check that
    the server hostname matches the domain name in the subject's CN
    field was flawed. This can be exploited by a Man-in-the-middle
    (MITM) attack where the attacker can spoof a valid certificate
    using a specially crafted subject.
    - debian/patches/CVE-2014-3577.patch: fix in AbstractVerifier.java
    - CVE-2014-3577

 -- Eduardo Barretto <email address hidden>  Fri, 10 Aug 2018 17:06:26 -0300

Upload details

Uploaded by:
Eduardo Barretto
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
all
Section:
java
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Trusty updates universe java
Trusty security universe java

Builds

Trusty: [FULLYBUILT] i386

Downloads

File Size SHA-256 Checksum
httpcomponents-client_4.3.3.orig.tar.gz 724.7 KiB 981ea48a7474f1800a880bfcbdc5b05240f2d6a360453d93529285e8d3db0626
httpcomponents-client_4.3.3-1ubuntu0.1.debian.tar.gz 7.7 KiB 8fc92d196e68abdeb083f478f18f26e0f0acf88e43794647abe8ff0a31e15491
httpcomponents-client_4.3.3-1ubuntu0.1.dsc 2.6 KiB 5d28e31370db426e0735a5159ada0705a44632a9676556f7e279f5501b605879

View changes file

Binary packages built by this source

libhttpclient-java: HTTP/1.1 compliant HTTP agent implementation

 HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on
 HttpCore. It also provides reusable components for client-side
 authentication, HTTP state management, and HTTP connection management.
 .
 HttpComponents Client is a successor of and replacement for Commons
 HttpClient 3.x. Users of Commons HttpClient are strongly encouraged to
 upgrade.

libhttpmime-java: HTTP/1.1 compliant HTTP agent implementation - MIME extension

 HttpClient is a HTTP/1.1 compliant HTTP agent implementation based on
 HttpCore. It also provides reusable components for client-side
 authentication, HTTP state management, and HTTP connection management.
 .
 HttpComponents Client is a successor of and replacement for Commons
 HttpClient 3.x. Users of Commons HttpClient are strongly encouraged to
 upgrade.
 .
 This package provides support for MIME multipart encoded entities
 to be used with HttpComponents Client.