wheezy update of httpcomponents-client

2015-04-18 Thread Markus Koschany
Hi, I was recently involved in fixing #758086, CVE-2014-3577, in commons-httpclient. Since httpcomponents-client is the successor of commons-httpclient, I saw that this package is also affected by CVE-2014-3577. I have prepared a debdiff for wheezy with all the necessary changes which is attached

Re: wheezy update of httpcomponents-client

2015-04-18 Thread Miguel Landaeta
On Sat, Apr 18, 2015 at 06:07:13PM +0200, Markus Koschany wrote: > Hi, > > I was recently involved in fixing #758086, CVE-2014-3577, in > commons-httpclient. Since httpcomponents-client is the successor of > commons-httpclient, I saw that this package is also affected by > CVE-2014-3577. I have pr

Re: wheezy update of httpcomponents-client

2015-04-18 Thread Markus Koschany
On 18.04.2015 18:37, Miguel Landaeta wrote: [...] > Hi Markus, > > I can sponsor it. > > What's the release.debian.org bug number for this? Hi Miguel, I have just filed the bug report. The bug number is https://bugs.debian.org/782848. Cheers, Markus signature.asc Description: OpenPGP digi

Re: wheezy update of httpcomponents-client

2015-04-18 Thread Miguel Landaeta
On Sat, Apr 18, 2015 at 09:03:42PM +0200, Markus Koschany wrote: > > [...] > > I have just filed the bug report. The bug number is > https://bugs.debian.org/782848. Great, let's wait for their answer before uploading. -- Miguel Landaeta, nomadium at debian.org secure email with PGP 0x6E608B63