[SCM] Debian packaging for the 2.0 Apache Shibboleth SP branch, debian, updated. upstream/2.2.1+dfsg-129-g86b8a8e
Russ Allbery
rra at debian.org
Tue Nov 10 23:43:00 UTC 2009
The following commit has been merged in the debian branch:
commit b80e914103099b04560c79351f830b33dc60d106
Author: Russ Allbery <rra at debian.org>
Date: Tue Nov 10 14:57:04 2009 -0800
Initial changelog for 2.3
diff --git a/debian/changelog b/debian/changelog
index 04e1ea7..fb94486 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,16 @@
-shibboleth-sp2 (2.2.1+dfsg-3) unstable; urgency=low
+shibboleth-sp2 (2.3+dfsg-1) UNRELEASED; urgency=low
+ [ Russ Allbery ]
+ * New upstream release.
+ - SECURITY: Partial fix for improper handling of URLs that could be
+ abused for script injection and other cross-site scripting attacks.
+ The complete fix also requires newer xmltooling and opensaml2
+ packages. (Closes: #555608, CVE-2009-3300)
+
+ [ Ferenc Wagner ]
* Run shibd as non-root.
- -- Ferenc Wagner <wferi at niif.hu> Fri, 18 Sep 2009 17:52:07 +0200
+ -- Russ Allbery <rra at debian.org> Tue, 10 Nov 2009 14:55:56 -0800
shibboleth-sp2 (2.2.1+dfsg-2) unstable; urgency=low
--
Debian packaging for the 2.0 Apache Shibboleth SP
More information about the Pkg-shibboleth-devel
mailing list