Changelog for
apache-commons-httpclient-3.1-45.5.noarch.rpm :
* Tue Apr 30 2024 Fridrich Strba
- Clean the spec: remove old macros and change to working urls
* Tue Feb 20 2024 Dominique Leuenberger - Use %patch -P N instead of deprecated %patchN.
* Tue Oct 27 2020 Pedro Monreal - Security fix [bsc#945190, CVE-2015-5262]
* http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors.- Add apache-commons-httpclient-CVE-2015-5262.patch
* Tue Oct 27 2020 Pedro Monreal - Security fix [bsc#1178171, CVE-2014-3577]
* org.apache.http.conn.ssl.AbstractVerifier does not properly verify that the server hostname matches a domain name in the subject\'s Common Name (CN) or subjectAltName field of the X.509 certificate, which allows MITM attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate.- Add apache-commons-httpclient-CVE-2014-3577.patch
* Mon Apr 01 2019 Jan Engelhardt - Trim conjecture from description.
* Mon Jan 21 2019 Fridrich Strba - Add maven pom file and clean-up the spec file
* Tue May 15 2018 fstrbaAATTsuse.com- Build with source and target 8 to prepare for a possible removal of 1.6 compatibility- Run fdupes on documentation
* Thu Sep 07 2017 fstrbaAATTsuse.com- Build with java source and target versions 1.6
* fixes build with jdk9
* Tue Jul 08 2014 tchvatalAATTsuse.com- Redo the bytcode disabling properly.- Cleanup with spec-cleaner
* Mon Apr 14 2014 darinAATTdarins.net- disable bytecode test on SLES