[From nobody Tue Oct 20 10:51:08 2026 Received: (at 1060169-close) by bugs.debian.org; 20 Oct 2026 09:49:33 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 89; hammy, 150; neutral, 171; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:52990) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xJ6TO-002yli-0l for 1060169-close@bugs.debian.org; Tue, 20 Oct 2026 09:49:33 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1xJ6TM-0013NB-0r for 1060169-close@bugs.debian.org; Tue, 20 Oct 2026 09:49:32 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=6xG/9H9GRoS8pSqXsqfiCAS9aNI7M5WK7/kHKSmvtGM=; b=EoeOVreBEY0dCo+ypVANJ5+lFr aKyz4cTwjaWb1GT3z0bsdFk9XmJ4CegnnOx7cps7UWdSvZPtmZVH/F9Oev2yhPeLeE4kiIJBIFdnJ P1iclXES5k7QrdyuCT2vhPbSUGFrW/REj/9kHgKCb2eWh1DsFWTOjXttEJr7PLOuiRAfr9YfAnUKr F6lxlIfNXNXWwYtzxcDe9oVXfw82ucFZVwitgRgC32bwIu2F+bhUJ2Kp2JZQfKzJ2lgZBvUVWhdGI 3Q4TzkZiY4lwFvXnadue3qNY6G9Il53aiLrjinoZ6s3yMHICGt+Z+tXKzTI01OoOX5nWDlqhKaqV8 rl8OxVBw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1xJ6TL-00000006BXt-1qNW; Tue, 20 Oct 2026 09:49:31 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Emmanuel Bourg <ebourg@apache.org> To: 1060169-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: axis Debian: DAK Debian-Changes: axis_1.4-30_source.changes Debian-Source: axis Debian-Version: 1.4-30 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1060169: fixed in axis 1.4-30 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7489607658057211792==" Message-Id: <E1xJ6TL-00000006BXt-1qNW@fasolo.debian.org> Date: Tue, 20 Oct 2026 09:49:31 +0000 --===============7489607658057211792== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: axis Source-Version: 1.4-30 Done: Emmanuel Bourg <ebourg@apache.org> We believe that the bug you reported is fixed in the latest version of axis, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1060169@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Emmanuel Bourg <ebourg@apache.org> (supplier of updated axis package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 20 Oct 2026 11:15:15 +0200 Source: axis Architecture: source Version: 1.4-30 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian= .org> Changed-By: Emmanuel Bourg <ebourg@apache.org> Closes: 929266 1060169 1139094 Changes: axis (1.4-30) unstable; urgency=3Dmedium . * Depend on libservlet-api-java instead of libservlet3.1-java * Standards-Version updated to 4.7.4 * Removed the Priority field * Removed Torsten Werner from the Uploaders (Closes: #1139094) * Fixed CVE-2019-0227: XMLUtils followed the HTTP redirections when fetching a resource by URL, enabling server side request forgery (Closes: #929266) * Fixed CVE-2023-51441: ServiceFactory accepted the IIOP and CORBANAME JNDI names, enabling server side request forgery from the admin service (Closes: #1060169) * Converted debian/watch to the version 5 format * Removed the libaxis-java-doc package * Fixed the instantiation of arbitrary classes named by the exceptionName of a SOAP fault, enabling unauthenticated remote code execution with a suitable gadget on the classpath Checksums-Sha1: b908f0a7f5b44df507fecba9500664266ca8dae0 2123 axis_1.4-30.dsc ee43cb5df2580c6735d8f0e2bb7ad2146263106a 16788 axis_1.4-30.debian.tar.xz a412ffd68594f92f920c48f7c60ba4d32cc53435 11948 axis_1.4-30_source.buildinfo Checksums-Sha256: 5466adcaa16f8a43b538d2a2a14348b3d1040ac43f45d8e1c4a571c844a3c581 2123 axis_1= .4-30.dsc 06747994b07bcb4e6f879a9f92de22e2d7e8114f9067bb555d8b57da7cb40d0f 16788 axis_= 1.4-30.debian.tar.xz 9470aef64fde7758201b0f5c8d870d4a5dde04b71ac1f86c0645bf2129058a4c 11948 axis_= 1.4-30_source.buildinfo Files: 19aeffe2c62858cb4e01b9c0170c3ebd 2123 java optional axis_1.4-30.dsc bf2dfd4aba76fdb73abfb06a68ee4dab 16788 java optional axis_1.4-30.debian.tar.= xz 8e5740e79c7193df42dc5018fa1a4ed5 11948 java optional axis_1.4-30_source.buil= dinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEuM5N4hCA3PkD4WxA9RPEGeS50KwFAmrXNqsSHGVib3VyZ0Bh cGFjaGUub3JnAAoJEPUTxBnkudCsIYEP/2HAjgbvz28+urGfIiCqKNTRaxKApnf+ LAbWDQMzv/KK5YUfZTucVGvhoqEuw1Iyk8BrTgeIyTDDf2cqMUxvZqoBnn96ghCO Io79kkXk0d2BYptQ94TBtTUfUgCa9GCFXc0mB5YfUR9zszgMH02zznt8yZIGkDIg kMcDDLrj7MeDunO69iJsHOCxcksX9yUdAEztGb1LGRVCK15IwQdVAUuqNlUGayld i2qul6xcFbe2DOALHBAz5yO4Y79xpVE7Nw/vN0Ztdj9zXZ4u66Y1HEqrG1b1JV3g jKqII1bp3zyus71y+r8UWIqNc3m298tft6wG7RuTM1U1Q8hhb/AUpZbGNyBk1jLZ YQZMEt8YRniPhfFQ2CGiohXIYdneIJPqiGvqk4m82Vxj5M+WBb9RGvmhhuAAeqLU viKWdEj9OnzS7yqiW05q1MDoBkfKB/LcrydDdcE0huTU4WsuZxqUa2FI/QI9HCH8 mirFsOmiJ5uPlsw/eTd8Cv5R08MN3EbDkA8axK6TjPLXc9mtnz3S25rbMgyKaS/r b9f8W37zuvaknjvWyhAUpjYGFm58j+x1RdSHx+G0muxYc3lm8Z49avTmO4pq1+vw wEij99vxcElFvEovAHZKmYi3Drbq0YEcMsS8QJV8YJZaj39j2ULWsCTlMs5nCs0e JTM7MQzELr7t =3DtpbP -----END PGP SIGNATURE----- --===============7489607658057211792== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCatc5KwAKCRCb9qggYcy5 IURhAP0Yhs4/aDg075ATKng2HfaZa4lC3TEpE57DPcxvx6KNswD/ZLa/En6Ynbor 27/z4HQxjcJp/fuE6DRvNqDtpM/EUwk= =C/eg -----END PGP SIGNATURE----- --===============7489607658057211792==-- ]