[SCM] Debian packaging for XML-Security-C annotated tag, debian/1.4.0-4, created. debian/1.4.0-4
Russ Allbery
rra at debian.org
Fri Jul 24 22:31:48 UTC 2009
The annotated tag, debian/1.4.0-4 has been created
at 22537092253d91528da03293f8d2da521557deb0 (tag)
tagging 34111fc6754e83afe338adb84bf39e63a10a4d2c (commit)
replaces debian/1.4.0-3
tagged by Russ Allbery
on Fri Jul 24 15:31:18 2009 -0700
- Shortlog ------------------------------------------------------------
Debian release 1.4.0-4
Format: 1.8
Date: Fri, 24 Jul 2009 15:02:55 -0700
Source: xml-security-c
Binary: libxml-security-c14 libxml-security-c-dev
Architecture: source i386
Version: 1.4.0-4
Distribution: unstable
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel at lists.alioth.debian.org>
Changed-By: Russ Allbery <rra at debian.org>
Description:
libxml-security-c-dev - C++ library for XML Digital Signatures (development)
libxml-security-c14 - C++ library for XML Digital Signatures (runtime)
Changes:
xml-security-c (1.4.0-4) unstable; urgency=high
.
* CVE-2009-0217: Apply upstream patch to sanity-check the HMAC
truncation length. Closes a vulnerability that could allow an
attacker to spoof HMAC-based signatures and bypass authentication.
* Remove duplicate section for libxml-security-c14.
* Update standards version to 3.8.2 (no changes required).
Checksums-Sha1:
c33fb7ce8b404624e312c22c8469afce10d66420 1350 xml-security-c_1.4.0-4.dsc
476ff6791d25f0bac1387c4d84a901142cbbc7a0 6257 xml-security-c_1.4.0-4.diff.gz
aee56c9cf0f0ee08460dbcb55ca4ba87c9774b6f 367778 libxml-security-c14_1.4.0-4_i386.deb
9f472e57fa41be2a173639d1b77ccaebb58b78ba 139684 libxml-security-c-dev_1.4.0-4_i386.deb
Checksums-Sha256:
d0e30da2a99e89ffc3521205424faf4bc1778137572c5fc698566d394f4d192e 1350 xml-security-c_1.4.0-4.dsc
496f9600fbeff13c63fdc8ac1b287a9927d5f05112ba3d7ac8ee1d8dc6cc587b 6257 xml-security-c_1.4.0-4.diff.gz
7a1a9e0b8e8cfffe47de0cb6e8808149e7bb7e5b46a29442a6bb906e6999f576 367778 libxml-security-c14_1.4.0-4_i386.deb
933d750e139c55d9cf0602b05ced6ecbde350d6b5d82b79e0951d6cb617cfdd5 139684 libxml-security-c-dev_1.4.0-4_i386.deb
Files:
c375af40c3d02f106d1a8fbfd31db9a0 1350 libs extra xml-security-c_1.4.0-4.dsc
12028cf2a8a899691ddb0fdeaae43ba6 6257 libs extra xml-security-c_1.4.0-4.diff.gz
a0fb1466234a8f3b0fd61f4d80fc4435 367778 libs extra libxml-security-c14_1.4.0-4_i386.deb
7b8523b3ccef3986778fdf552e765591 139684 libdevel extra libxml-security-c-dev_1.4.0-4_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEABECAAYFAkpqNkEACgkQ+YXjQAr8dHYZCwCfab6YtW7+FPBIRNWdoT0vyWYI
UNcAoLkFyHyaBFSY19EnloDBbrFF75gb
=PYno
-----END PGP SIGNATURE-----
Russ Allbery (7):
Upstream fix for HMAC vulnerability (CVE-2009-0217)
Changelog for 1.4.0-4
Merge branch 'bug/CVE-2009-0217'
Merge branch 'debian'
Update standards version to 3.8.2
Remove duplicate section for libxml-security-c14
Merge branch 'debian'
-----------------------------------------------------------------------
--
Debian packaging for XML-Security-C
More information about the Pkg-shibboleth-devel
mailing list