← Back to branch summary

~ubuntu-branches/debian/squeeze/libcommons-fileupload-java/squeeze

~ubuntu-branches/debian/squeeze/libcommons-fileupload-java/squeeze

Viewing all changes in revision 11.

Committer: Package Import Robot
Author(s): Emmanuel Bourg
Date: 2014-02-07 17:12:35 UTC
Revision ID: package-import@ubuntu.com-20140207171235-mz79q4k0eq666mfa

Tags: 1.2.2-1+deb6u2

* Team upload.
* Fix CVE-2014-0050: Specially crafted input can trigger an infinite loop
  if the buffer used by the MultipartStream is not big enough. When
  constructing MultipartStream enforce the requirements for buffer size
  by throwing an IllegalArgumentException if the requested buffer size is
  too small. This prevents the DoS.
* Enable the unit tests

files added:
.pc

.pc/.quilt_patches

.pc/.quilt_series

.pc/.version

.pc/CVE-2013-2186.patch

.pc/CVE-2013-2186.patch/src

.pc/CVE-2013-2186.patch/src/java

.pc/CVE-2013-2186.patch/src/java/org

.pc/CVE-2013-2186.patch/src/java/org/apache

.pc/CVE-2013-2186.patch/src/java/org/apache/commons

.pc/CVE-2013-2186.patch/src/java/org/apache/commons/fileupload

.pc/CVE-2013-2186.patch/src/java/org/apache/commons/fileupload/disk

.pc/CVE-2013-2186.patch/src/java/org/apache/commons/fileupload/disk/DiskFileItem.java

.pc/CVE-2014-0050.patch

.pc/CVE-2014-0050.patch/src

.pc/CVE-2014-0050.patch/src/java

.pc/CVE-2014-0050.patch/src/java/org

.pc/CVE-2014-0050.patch/src/java/org/apache

.pc/CVE-2014-0050.patch/src/java/org/apache/commons

.pc/CVE-2014-0050.patch/src/java/org/apache/commons/fileupload

.pc/CVE-2014-0050.patch/src/java/org/apache/commons/fileupload/FileUploadBase.java

.pc/CVE-2014-0050.patch/src/java/org/apache/commons/fileupload/MultipartStream.java

.pc/CVE-2014-0050.patch/src/test

.pc/CVE-2014-0050.patch/src/test/org

.pc/CVE-2014-0050.patch/src/test/org/apache

.pc/CVE-2014-0050.patch/src/test/org/apache/commons

.pc/CVE-2014-0050.patch/src/test/org/apache/commons/fileupload

.pc/CVE-2014-0050.patch/src/test/org/apache/commons/fileupload/MultipartStreamTest.java

.pc/applied-patches

.pc/remove-unused-test-classes.patch

.pc/remove-unused-test-classes.patch/src

.pc/remove-unused-test-classes.patch/src/test

.pc/remove-unused-test-classes.patch/src/test/org

.pc/remove-unused-test-classes.patch/src/test/org/apache

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons/fileupload

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons/fileupload/MockPortletRequest.java

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons/fileupload/MockPortletSession.java

debian/patches

debian/patches/CVE-2013-2186.patch

debian/patches/CVE-2014-0050.patch

debian/patches/remove-unused-test-classes.patch

debian/patches/series

files removed:
src/test/org/apache/commons/fileupload/MockPortletRequest.java

src/test/org/apache/commons/fileupload/MockPortletSession.java

files modified:
debian/changelog

src/java/org/apache/commons/fileupload/FileUploadBase.java

src/java/org/apache/commons/fileupload/MultipartStream.java

src/java/org/apache/commons/fileupload/disk/DiskFileItem.java

src/test/org/apache/commons/fileupload/MultipartStreamTest.java

Show diffs side-by-side

added added

removed removed

.pc/.quilt_patches

.pc/.quilt_series

.pc/CVE-2013-2186.patch/

.pc/CVE-2013-2186.patch/src/

.pc/CVE-2013-2186.patch/src/java/

.pc/CVE-2013-2186.patch/src/java/org/

.pc/CVE-2013-2186.patch/src/java/org/apache/

.pc/CVE-2013-2186.patch/src/java/org/apache/commons/

.pc/CVE-2013-2186.patch/src/java/org/apache/commons/fileupload/

.pc/CVE-2013-2186.patch/src/java/org/apache/commons/fileupload/disk/

.pc/CVE-2013-2186.patch/src/java/org/apache/commons/fileupload/disk/DiskFileItem.java

.pc/CVE-2014-0050.patch/

.pc/CVE-2014-0050.patch/src/

.pc/CVE-2014-0050.patch/src/java/

.pc/CVE-2014-0050.patch/src/java/org/

.pc/CVE-2014-0050.patch/src/java/org/apache/

.pc/CVE-2014-0050.patch/src/java/org/apache/commons/

.pc/CVE-2014-0050.patch/src/java/org/apache/commons/fileupload/

.pc/CVE-2014-0050.patch/src/java/org/apache/commons/fileupload/FileUploadBase.java

.pc/CVE-2014-0050.patch/src/java/org/apache/commons/fileupload/MultipartStream.java

.pc/CVE-2014-0050.patch/src/test/

.pc/CVE-2014-0050.patch/src/test/org/

.pc/CVE-2014-0050.patch/src/test/org/apache/

.pc/CVE-2014-0050.patch/src/test/org/apache/commons/

.pc/CVE-2014-0050.patch/src/test/org/apache/commons/fileupload/

.pc/CVE-2014-0050.patch/src/test/org/apache/commons/fileupload/MultipartStreamTest.java

.pc/applied-patches

.pc/remove-unused-test-classes.patch/

.pc/remove-unused-test-classes.patch/src/

.pc/remove-unused-test-classes.patch/src/test/

.pc/remove-unused-test-classes.patch/src/test/org/

.pc/remove-unused-test-classes.patch/src/test/org/apache/

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons/

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons/fileupload/

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons/fileupload/MockPortletRequest.java

.pc/remove-unused-test-classes.patch/src/test/org/apache/commons/fileupload/MockPortletSession.java

debian/changelog

debian/patches/

debian/patches/CVE-2013-2186.patch

debian/patches/CVE-2014-0050.patch

debian/patches/remove-unused-test-classes.patch

debian/patches/series

src/java/org/apache/commons/fileupload/FileUploadBase.java

src/java/org/apache/commons/fileupload/MultipartStream.java

src/java/org/apache/commons/fileupload/disk/DiskFileItem.java

src/test/org/apache/commons/fileupload/MockPortletRequest.java

src/test/org/apache/commons/fileupload/MockPortletSession.java

src/test/org/apache/commons/fileupload/MultipartStreamTest.java

Older »