Bug#758086: marked as done (CVE-2014-3577 Apache HttpComponents hostname verification bypass)

Mon Apr 13 17:09:19 UTC 2015

Your message dated Mon, 13 Apr 2015 17:05:26 +0000
with message-id <E1Yhhna-0001cZ-MD at franck.debian.org>
and subject line Bug#758086: fixed in commons-httpclient 3.1-11
has caused the Debian Bug report #758086,
regarding CVE-2014-3577 Apache HttpComponents hostname verification bypass
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)

-- 
758086: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=758086
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Henri Salo <henri at nerv.fi>
Subject: CVE-2012-6153: Apache HttpComponents client: Hostname verification susceptible to MITM attack
Date: Thu, 14 Aug 2014 10:06:47 +0300
Size: 3314
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20150413/4e708f35/attachment-0002.mht>
-------------- next part --------------
An embedded message was scrubbed...
From: Markus Koschany <apo at gambaru.de>
Subject: Bug#758086: fixed in commons-httpclient 3.1-11
Date: Mon, 13 Apr 2015 17:05:26 +0000
Size: 6038
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20150413/4e708f35/attachment-0003.mht>