Author: Marc Deslauriers
Revision Date: 2015-10-01 08:51:52 UTC

* SECURITY UPDATE: improper certificate hostname verification
  - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2014-3577
* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262
* debian/ant.properties: bump version to 1.5 to handle security fixes.

Author: Marc Deslauriers
Revision Date: 2015-10-01 09:05:17 UTC

* SECURITY UPDATE: improper certificate hostname verification
  - debian/patches/06_fix_CVE-2012-5783.patch: fix CN extraction and
    wildcard verification in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2012-5783
  - CVE-2012-6153
  - CVE-2014-3577
* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262
* debian/ant.properties: bump version to 1.5 to handle security fixes.

Author: Marc Deslauriers
Revision Date: 2015-10-01 08:51:52 UTC

* SECURITY UPDATE: improper certificate hostname verification
  - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2014-3577
* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262
* debian/ant.properties: bump version to 1.5 to handle security fixes.

Author: Marc Deslauriers
Revision Date: 2015-10-01 08:51:52 UTC

* SECURITY UPDATE: improper certificate hostname verification
  - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2014-3577
* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262
* debian/ant.properties: bump version to 1.5 to handle security fixes.

Author: Marc Deslauriers
Revision Date: 2015-10-01 09:05:17 UTC

* SECURITY UPDATE: improper certificate hostname verification
  - debian/patches/06_fix_CVE-2012-5783.patch: fix CN extraction and
    wildcard verification in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2012-5783
  - CVE-2012-6153
  - CVE-2014-3577
* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262
* debian/ant.properties: bump version to 1.5 to handle security fixes.

Author: Marc Deslauriers
Revision Date: 2015-10-01 08:51:52 UTC

* SECURITY UPDATE: improper certificate hostname verification
  - debian/patches/CVE-2014-3577.patch: fix Common Name logic in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2014-3577
* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262
* debian/ant.properties: bump version to 1.5 to handle security fixes.

Author: Marc Deslauriers
Revision Date: 2015-10-01 08:49:28 UTC

* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262

Author: Marc Deslauriers
Revision Date: 2015-10-01 08:49:28 UTC

* SECURITY UPDATE: denial of service via failure to set socket timeout
  - debian/patches/CVE-2015-5262.patch: respect configured timeout in
    src/java/org/apache/commons/httpclient/protocol/SSLProtocolSocketFactory.java.
  - CVE-2015-5262

Author: Alberto Fernández
Revision Date: 2012-12-06 14:28:00 UTC

* Non-maintainer upload.
* Fix CVE-2012-5783 (Closes: #692442)
* Fix CN extraction from DN of X500 principal.
* Fix wildcard validation on ssl connections

Author: Alberto Fernández
Revision Date: 2012-12-06 14:28:00 UTC

* Non-maintainer upload.
* Fix CVE-2012-5783 (Closes: #692442)
* Fix CN extraction from DN of X500 principal.
* Fix wildcard validation on ssl connections

Author: Alberto Fernández
Revision Date: 2012-12-06 14:28:00 UTC

* Non-maintainer upload.
* Fix CVE-2012-5783 (Closes: #692442)
* Fix CN extraction from DN of X500 principal.
* Fix wildcard validation on ssl connections

Author: Alberto Fernández
Revision Date: 2012-12-06 14:28:00 UTC

* Non-maintainer upload.
* Fix CVE-2012-5783 (Closes: #692442)
* Fix CN extraction from DN of X500 principal.
* Fix wildcard validation on ssl connections

Author: Alberto Fernández
Revision Date: 2012-12-06 14:28:00 UTC

* Non-maintainer upload.
* Fix CVE-2012-5783 (Closes: #692442)
* Fix CN extraction from DN of X500 principal.
* Fix wildcard validation on ssl connections

Author: Alberto Fernández
Revision Date: 2012-12-06 14:28:00 UTC

* Non-maintainer upload.
* Fix CVE-2012-5783 (Closes: #692442)
* Fix CN extraction from DN of X500 principal.
* Fix wildcard validation on ssl connections

Author: James Page
Revision Date: 2012-05-18 11:35:24 UTC

No-change rebuild with openjdk-7 as default-jdk.

Author: Torsten Werner
Revision Date: 2011-08-30 11:47:01 UTC

[ Damien Raude-Morvan ]
* Remove Arnaud Vandyck from Uploaders
* d/control: Drop Depends on any JRE as a Java library don't need to
  depends on a runtime (Java Policy)

[ Torsten Werner ]
* Switch to source format 3.0.
* Update Standards-Version: 3.9.1.
* Remove Barry from Uploaders list.

Author: Torsten Werner
Revision Date: 2011-08-30 11:47:01 UTC

[ Damien Raude-Morvan ]
* Remove Arnaud Vandyck from Uploaders
* d/control: Drop Depends on any JRE as a Java library don't need to
  depends on a runtime (Java Policy)

[ Torsten Werner ]
* Switch to source format 3.0.
* Update Standards-Version: 3.9.1.
* Remove Barry from Uploaders list.

Author: Damien Raude-Morvan
Revision Date: 2009-11-29 01:06:18 UTC

* Add myself to Uploaders
* Use quilt as patch system
  - Build-Depends on quilt
  - Add debian/README.source
  - Use CDBS patchsys-quilt.mk
* New debian/patches/05_osgi_metadata.diff to include OSGi metadata
  in JAR (Closes: #558182)

Author: Damien Raude-Morvan
Revision Date: 2009-11-29 01:06:18 UTC

* Add myself to Uploaders
* Use quilt as patch system
  - Build-Depends on quilt
  - Add debian/README.source
  - Use CDBS patchsys-quilt.mk
* New debian/patches/05_osgi_metadata.diff to include OSGi metadata
  in JAR (Closes: #558182)

Author: Torsten Werner
Revision Date: 2009-10-17 19:44:10 UTC

* Add myself to Uploaders.
* Revert change from last upload:
  - Don't map version of commons-httpclient explicitly.
  (Closes: #551126, #551214, #551217, #551218, #551221, #551224, #551226,
  #551227, #551231, #551242)

Author: Chris Cheney
Revision Date: 2008-12-17 00:15:00 UTC

* Merge from debian unstable, remaining changes:
  - default-java transition.

Author: Kumar Appaiah
Revision Date: 2008-04-18 13:25:36 UTC

* debian/watch:
  + Update to reflect new upstream mirror structure.
    (Closes: #459995)
* debian/control:
  + Update my e-mail address to akumar@debian.org.
  + Standards Version is now 3.7.3.
  + Use Vcs-Svn and Vcs-Browser in place of XS-Vcs-*.
  + Depend on ant 1.6.5 and above, instead of 1.6.5-1.

Author: Kumar Appaiah
Revision Date: 2007-09-20 20:14:02 UTC

* New upstream release.
* Acknowledge NMU. Thanks to Michael Meskes for the upload.
* debian/ant.properties:
  + Correct Java directory spelling.
* debian/control:
  + Add Varun Hiremath and Kumar Appaiah to Uploaders.
  + Add XS-Vcs-Browser and XS-Vcs-Browser.
  + Move section of libcommons-httpclient-doc to doc.
  + Add Homepage Field.
* debian/patches:
  + Remove 00b_build_xml_dont_copy_lib_dir.patch
  + Update patches/01_build_xml_version_jar.patch and
    patches/02_upstream_disable_examples_classes.patch for the new
    upstream version
* debian/rules:
  + Remove dependence on package version; use DEB_UPSTREAM_VERSION for version
* debian/libcommons-httpclient-java.install:
  + Not needed, since functionality written in debian.rules.
* debian/watch
  + Update watch file to new upstream tarball directory.
* debian/libcommons-httpclient-java.link:
  + Not needed, since functionality written in debian.rules.
* Upstream has fixed some RFC violations. (Closes: #329245)
* Remove .cvsignore files.

Author: Michael Meskes
Revision Date: 2006-09-15 20:07:43 UTC

* Non-maintainer upload.
* Bump debhelper Build-Depends to (>= 4.1.0) as required by cdbs'
  debhelper.mk
* Put the coppyright holders in debian/copyright
* Include the jar file in the package. (Closes: #381354)
* Only include one copy of the docs.
  done by James Westby <jw+debian@jameswestby.net> Mon, 14 Aug 2006 02:29:47 +0100

Author: Michael Meskes
Revision Date: 2006-09-15 20:07:43 UTC

* Non-maintainer upload.
* Bump debhelper Build-Depends to (>= 4.1.0) as required by cdbs'
  debhelper.mk
* Put the coppyright holders in debian/copyright
* Include the jar file in the package. (Closes: #381354)
* Only include one copy of the docs.
  done by James Westby <jw+debian@jameswestby.net> Mon, 14 Aug 2006 02:29:47 +0100

Author: Barry Hawkins
Revision Date: 2005-11-25 13:12:23 UTC

* Provide non-version-specific symlink "commons-httpclient.jar" to
  commons-httpclient-2.0.2.jar per Debian Java Policy Section 2.4
  (Closes: 340308)
* Added additional doc-base entry to point to main section of
  Jakarta Commons HttpClient documentation in addition to the
  API Javadoc
* Maintainer email address updated for Barry Hawkins
* Upload sponsored by Petter Reinholdtsen

Author: Barry Hawkins
Revision Date: 2005-11-25 13:12:23 UTC

* Provide non-version-specific symlink "commons-httpclient.jar" to
  commons-httpclient-2.0.2.jar per Debian Java Policy Section 2.4
  (Closes: 340308)
* Added additional doc-base entry to point to main section of
  Jakarta Commons HttpClient documentation in addition to the
  API Javadoc
* Maintainer email address updated for Barry Hawkins
* Upload sponsored by Petter Reinholdtsen

Author: Stephen Peters
Revision Date: 2002-10-03 16:32:59 UTC

Fix leading directory in Jar file (closes: #162606)

Author: Stephen Peters
Revision Date: 2002-10-03 16:32:59 UTC

Fix leading directory in Jar file (closes: #162606)

Author: Stephen Peters
Revision Date: 2002-10-03 16:32:59 UTC

Fix leading directory in Jar file (closes: #162606)

Author: Damien Raude-Morvan
Revision Date: 2009-11-29 01:06:18 UTC

* Add myself to Uploaders
* Use quilt as patch system
  - Build-Depends on quilt
  - Add debian/README.source
  - Use CDBS patchsys-quilt.mk
* New debian/patches/05_osgi_metadata.diff to include OSGi metadata
  in JAR (Closes: #558182)