[SCM] Debian packaging for XMLTooling-C branch, debian, updated. upstream/1.2-66-gde95b9a

Russ Allbery rra at debian.org
Thu Aug 27 18:22:42 UTC 2009


The following commit has been merged in the debian branch:
commit b86a73e24b1397730aaf7335080ef5f511a87e6c
Author: Russ Allbery <rra at debian.org>
Date:   Thu Aug 27 11:17:35 2009 -0700

    Add upstream changelog for 1.2.2

diff --git a/debian/changelog b/debian/changelog
index 1668e34..252928d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,16 @@
+xmltooling (1.2.2-1) UNRELEASED; urgency=low
+
+  * New upstream release.
+    - SECURITY: Fix potential buffer overflows and reuses of freed objects
+      in error handling code paths with invalid XML.  See
+      http://shibboleth.internet2.edu/secadv/secadv_20090826.txt
+    - Fix other validation issues with malformed objects.
+    - Fix for accessing the resolution context, which affects the ability
+      of callers to restrict keys based on use attributes.
+    - Fix encoding of backup metadata.
+
+ -- Russ Allbery <rra at debian.org>  Thu, 27 Aug 2009 11:01:35 -0700
+
 xmltooling (1.2-1) unstable; urgency=low
 
   * New upstream release.

-- 
Debian packaging for XMLTooling-C



More information about the Pkg-shibboleth-devel mailing list