[SCM] Debian packaging for the Shibboleth Apache SP annotated tag, debian/1.3f.dfsg1-2+etch2, created. debian/1.3f.dfsg1-2+etch2

Russ Allbery rra at debian.org
Sun Dec 6 21:26:10 UTC 2009


The annotated tag, debian/1.3f.dfsg1-2+etch2 has been created
        at  fb9416f49133f2f9153d5600aec1c446206ede38 (tag)
   tagging  a7122a3e40c8d3cb5577e2abfe664c157c10ea5f (commit)
  replaces  debian/1.3f.dfsg1-2+etch1
 tagged by  Russ Allbery
        on  Sun Dec 6 13:25:31 2009 -0800

- Shortlog ------------------------------------------------------------
Debian release 1.3f.dfsg1-2+etch2

Format: 1.7
Date: Wed, 02 Dec 2009 22:15:50 -0800
Source: shibboleth-sp
Binary: libapache2-mod-shib libshib6 libshib-dev libshib-target5
Architecture: source i386
Version: 1.3f.dfsg1-2+etch2
Distribution: oldstable-security
Urgency: high
Maintainer: Quanah Gibson-Mount <quanah at stanford.edu>
Changed-By: Russ Allbery <rra at debian.org>
Description:
 libapache2-mod-shib - Shibboleth implements the OASIS SAML v1.1 specification,
 libshib-dev - Shibboleth federated authorization system (development)
 libshib-target5 - Shibboleth implements the OASIS SAML v1.1 specification,
 libshib6   - Shibboleth federated authorization system (development)
Changes:
 shibboleth-sp (1.3f.dfsg1-2+etch2) oldstable-security; urgency=high
 .
   * SECURITY: Fix improper handling of URLs that could be abused for
     script injection and other cross-site scripting attacks.
     (CVE-2009-3300)
Files:
 4b81922200999d83b4e6e300dc4105b2 957 web optional shibboleth-sp_1.3f.dfsg1-2+etch2.dsc
 ce866f75fd4a3e360bcf1f40328a6775 35169 web optional shibboleth-sp_1.3f.dfsg1-2+etch2.diff.gz
 4d36fe53ea41d60d8a9271a8283f982e 433480 libdevel extra libshib-dev_1.3f.dfsg1-2+etch2_i386.deb
 2e8ccdf193b826c7edea81d64928e306 76582 libs optional libshib6_1.3f.dfsg1-2+etch2_i386.deb
 43e1ccf246c06173bb0b726435f0d815 201376 libs optional libshib-target5_1.3f.dfsg1-2+etch2_i386.deb
 706787e36afd27879765043b36e21b67 3717328 web optional libapache2-mod-shib_1.3f.dfsg1-2+etch2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABECAAYFAkscIWAACgkQ+YXjQAr8dHZ10wCg28e7wEL3JahEep6m/TWF9wLD
zWkAn21ZXEJJ2BaCYHYKp1mkh16E8RXK
=r5q7
-----END PGP SIGNATURE-----

Russ Allbery (1):
      Backport upstream security fix for URL handling

-----------------------------------------------------------------------

-- 
Debian packaging for the Shibboleth Apache SP



More information about the Pkg-shibboleth-devel mailing list