[SCM] Debian packaging for XML-Security-C annotated tag, debian/1.6.1-1, created. debian/1.6.1-1
Russ Allbery
rra at debian.org
Thu Jul 7 16:19:46 UTC 2011
The annotated tag, debian/1.6.1-1 has been created
at 09347340db29e0fea598e7c83819b765f624fefe (tag)
tagging 508773a61e73f5bb00b40545888149be4f34d916 (commit)
replaces debian/1.6.0-2
tagged by Russ Allbery
on Thu Jul 7 09:19:20 2011 -0700
- Shortlog ------------------------------------------------------------
Debian release 1.6.1-1
Format: 1.8
Date: Thu, 07 Jul 2011 09:10:33 -0700
Source: xml-security-c
Binary: libxml-security-c16 libxml-security-c-dev
Architecture: source i386
Version: 1.6.1-1
Distribution: unstable
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel at lists.alioth.debian.org>
Changed-By: Russ Allbery <rra at debian.org>
Description:
libxml-security-c-dev - C++ library for XML Digital Signatures (development)
libxml-security-c16 - C++ library for XML Digital Signatures (runtime)
Closes: 632973
Changes:
xml-security-c (1.6.1-1) unstable; urgency=high
.
* Urgency high for security fix.
* New upstream release.
- DSIGObject::load method crashes for ds:Object without Id attribute
- Buffer overflow when signing or verifying files with big asymmetric
keys (Closes: #632973, CVE-2011-2516)
- Memory bug inside XENCCipherImpl::deSerialise
- Function cleanURIEscapes always throws XSECException, when any
escape sequence occurs
- Function isHexDigit doesn't recognize invalid escape sequences
- Percent-encoded multibyte (UTF-8) sequences unrecognized
- RSA-OAEP handler only allows SHA-1 digests
* Update debian/watch for the new organization of Apache downloads.
Checksums-Sha1:
fd7a3f73e53120fab3d7c99e43097d63db6103d3 1689 xml-security-c_1.6.1-1.dsc
239304659752eb214f3516b6c457c99f0e6467c7 864366 xml-security-c_1.6.1.orig.tar.gz
6874daf4e6ad0421ce34ee1f3e833923d79ca547 7285 xml-security-c_1.6.1-1.debian.tar.gz
2dd5e68cdee7b76567cf0a6fd912d0d9adaea8e9 372064 libxml-security-c16_1.6.1-1_i386.deb
5dbe7bede14e1cb0fc01a050c7a7425cab5f61b5 150394 libxml-security-c-dev_1.6.1-1_i386.deb
Checksums-Sha256:
74c60ca69966f246e40f3a10b1f61f1b84fdd0a58f3cda0b29eb2b0e1d484575 1689 xml-security-c_1.6.1-1.dsc
73931a55d6925a82416ea48f8d6f1b8ed591368e1dfc30574fe43904b7c62fcd 864366 xml-security-c_1.6.1.orig.tar.gz
ae82090ad6f81811de165fb795e8b5b84285e3f4f42cc19320eb73452a47297a 7285 xml-security-c_1.6.1-1.debian.tar.gz
140594585d9912644494c4d3a6d12fc31ae8972df3ae8b9b64905909d5b2623d 372064 libxml-security-c16_1.6.1-1_i386.deb
c202edb2f3e5b9ae7f8790bc7d0a8fcc86e8f2e5bd877764c42f03de41f6ae99 150394 libxml-security-c-dev_1.6.1-1_i386.deb
Files:
239ad9504d7326e84e8c49bb48f5c764 1689 libs extra xml-security-c_1.6.1-1.dsc
808316c80a7453b6d50a0bceb7ebe9bc 864366 libs extra xml-security-c_1.6.1.orig.tar.gz
7dbad386fb00cdb401ffc1210592148a 7285 libs extra xml-security-c_1.6.1-1.debian.tar.gz
2b7e014d7727c17fd301fa209b374d80 372064 libs extra libxml-security-c16_1.6.1-1_i386.deb
382d66533e1bc31680a2762c8f3786f4 150394 libdevel extra libxml-security-c-dev_1.6.1-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAABCAAGBQJOFdyVAAoJEH2AMVxXNt51ZU0H/3VZgDRFV2p8yB7FQorfjDrd
VllUAIt7xrT/reYkJBaQQUcOnR/QXVKwhD5J/Pz2RiyGVD+pGpO5ogYLh4y6J1q/
9p7j5bftOKrsgNodkMdUpsU2mxQEw3Zk7sUu20Fkh5ogE3FVXs2sqieebrS6d9tA
g21s4lVQ2NzKihvXQu/ecWW0EYPq9tkoWoQ5dDQxHauqPVbYsR7lTnRxciIqAMMM
FrmaURexKSiTb6jnmnOAOUA9qU8MJ/NombiujklN0tx9ac0ZBgsZ213W1HrGWJHb
VDCycDHGTXZltgskyJW1qCLIDZ8mPHe/wwNfrcDYG+6oK25gvsaLS4VomhEgBOQ=
=ih6P
-----END PGP SIGNATURE-----
Russ Allbery (6):
Update debian/watch for the new organization of Apache downloads
Imported Upstream version 1.6.1
Merge commit 'upstream/1.6.1'
Add changelog for upstream 1.6.1 release
Update debian/copyright for the new upstream release
Finalize changes for 1.6.1-1
-----------------------------------------------------------------------
--
Debian packaging for XML-Security-C
More information about the Pkg-shibboleth-devel
mailing list