Ubuntu
libcommons-net-java package

libcommons-net-java 3.6-1+deb11u1build0.20.04.1 source package in Ubuntu

Changelog

libcommons-net-java (3.6-1+deb11u1build0.20.04.1) focal-security; urgency=medium

  * fake sync from Debian

libcommons-net-java (3.6-1+deb11u1) bullseye-security; urgency=high

  * Non-maintainer upload by the LTS team.
  * Fix CVE-2021-37533:
    ZeddYu Lu discovered that the FTP client of Apache Commons Net, a Java
    client API for basic Internet protocols, trusts the host from PASV response
    by default. A malicious server can redirect the Commons Net code to use a
    different host, but the user has to connect to the malicious server in the
    first place. This may lead to leakage of information about services running
    on the private network of the client. (Closes: #1025910)

 -- George-Andrei Iosif <email address hidden>  Thu, 20 Apr 2023 13:54:01 +0300

Upload details

Uploaded by:
George-Andrei Iosif
Uploaded to:
Focal
Original maintainer:
Debian Java Maintainers
Architectures:
all
Section:
java
Urgency:
Very Urgent

See full publishing history Publishing

Series Pocket Published Component Section
Focal updates universe misc
Focal security universe misc

Builds

Focal: [FULLYBUILT] amd64

Downloads

File Size SHA-256 Checksum
libcommons-net-java_3.6.orig.tar.xz 300.6 KiB 7eee0e4ac4905c84b5c585a6785cdf9c87b89502f608059b2e766c92f60c4811
libcommons-net-java_3.6-1+deb11u1build0.20.04.1.debian.tar.xz 7.0 KiB be664e82efe4a0d96ecbf731cc8f79259e6da852a2dc407c9309db62bc92f540
libcommons-net-java_3.6-1+deb11u1build0.20.04.1.dsc 2.5 KiB afb04fe73e7c85f41b0d7336787670aae2c160af6d036ce0a2820322e7322eb1

View changes file

Binary packages built by this source

libcommons-net-java: Apache Commons Net - Java client API for basic Internet protocols

 The Apache Commons Net library implements the client side of many basic
 Internet protocols. The purpose of the library is to provide fundamental
 protocol access, not higher-level abstractions. Therefore, some of the
 design violates object-oriented design principles. The philosophy is to
 make the global functionality of a protocol accessible (e.g., TFTP send
 file and receive file) when possible, but also provide access to the
 fundamental protocols where applicable so that a programmer may construct
 his own custom implementations (e.g, the TFTP packet classes and the TFTP
 packet send and receive methods are exposed).
 .
 The supported protocols include:
  * FTP/FTPS
  * FTP over HTTP (experimental)
  * NNTP
  * SMTP(S)
  * POP3(S)
  * IMAP(S)
  * Telnet
  * TFTP
  * Finger
  * Whois
  * rexec/rcmd/rlogin
  * Time (rdate) and Daytime
  * Echo
  * Discard
  * NTP/SNTP

libcommons-net-java-doc: Apache Commons Net (API documentation)

 The Apache Commons Net library implements the client side of many basic
 Internet protocols. The purpose of the library is to provide fundamental
 protocol access, not higher-level abstractions. Therefore, some of the
 design violates object-oriented design principles. The philosophy is to
 make the global functionality of a protocol accessible (e.g., TFTP send
 file and receive file) when possible, but also provide access to the
 fundamental protocols where applicable so that a programmer may construct
 his own custom implementations (e.g, the TFTP packet classes and the TFTP
 packet send and receive methods are exposed).
 .
 This package contains the API documentation for libcommons-net-java.