lp:ubuntu/utopic/axis

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

20. By Markus Koschany on 2014-09-25

* Team upload.
* Fix CVE-2014-3596.
  - Replace 06-fix-CVE-2012-5784.patch with CVE-2014-3596.patch which fixes
    both CVE issues. Thanks to Raphael Hertzog for the report.
  - The getCN function in Apache Axis 1.4 and earlier does not properly
    verify that the server hostname matches a domain name in the subject's
    Common Name (CN) or subjectAltName field of the X.509 certificate,
    which allows man-in-the-middle attackers to spoof SSL servers via a
    certificate with a subject that specifies a common name in a field
    that is not the CN field. NOTE: this issue exists because of an
    incomplete fix for CVE-2012-5784.
  - (Closes: #762444)
* Declare compliance with Debian Policy 3.9.6.
* Use compat level 9 and require debhelper >=9.
* Use canonical VCS fields.

19. By Matthias Klose on 2014-03-25

Revert: d/control,rules: Drop use of bnd to generate OSGi headers.
Package is in universe again.

18. By James Page on 2014-03-04

d/control,rules,libaxis-java.manifest: Add missing OSGi data to manifests
for axis jar files using javahelper (LP: #894302).

17. By James Page on 2013-06-03

* Merge from Debian unstable. Remaining changes:
  - d/control,rules: Drop use of bnd to generate OSGi headers as
    its not in main.
* Dropped changes (now in Debian):
  - Transition libservlet2.5-java -> libservlet3.0-java.

16. By James Page on 2013-05-16

* Merge from Debian unstable. Remaining changes:
  - Transition libservlet2.5-java -> libservlet3.0-java.
* d/control,rules: Drop use of bnd to generate OSGi headers as its not
  in main.

15. By James Page on 2013-02-05

* Merge from Debian unstable. Remaining changes:
  - Transition libservlet2.5-java -> libservlet3.0-java.

14. By James Page on 2012-07-12

Transition libservlet2.5-java -> libservlet3.0-java.

13. By James Page on 2012-05-18

No-change rebuild with openjdk-7 as default-jdk.

12. By Jakub Adam on 2011-10-31

* Add missing dependency on libcommons-httpclient-java
* Update Export-Package OSGi attribute in manifest
* Add Require-Bundle OSGi attributes

11. By Damien Raude-Morvan on 2011-03-06

[ tony mancill ]
* libaxis-java-gcj: Remove incorrect libservlet2.4 depedency;
  the dependency on libaxis-java is sufficient.
  Thanks to Matthias Klose. (Closes: #597950)

[ Damien Raude-Morvan ]
* d/control: Bump Standards-Versions to 3.9.1 (no changes required).
* d/control: Change short synopsis of packages.
* Finaly upload to unstable.