[SCM] Debian packaging for OpenSAML 2.0 annotated tag, debian/2.4.3-1, created. debian/2.4.3-1
Russ Allbery
rra at debian.org
Mon Jul 25 20:41:51 UTC 2011
The annotated tag, debian/2.4.3-1 has been created
at abc8f4f55f94c38af9d9704983b9b5afd4e15704 (tag)
tagging a5fabcfd430fd0e3b85d40d28a2435ad4d8576c5 (commit)
replaces debian/2.4.1-1
tagged by Russ Allbery
on Mon Jul 25 13:41:27 2011 -0700
- Shortlog ------------------------------------------------------------
Debian release 2.4.3-1
Format: 1.8
Date: Mon, 25 Jul 2011 13:35:54 -0700
Source: opensaml2
Binary: libsaml7 libsaml2-dev opensaml2-tools opensaml2-schemas libsaml2-doc
Architecture: source i386 all
Version: 2.4.3-1
Distribution: unstable
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel at lists.alioth.debian.org>
Changed-By: Russ Allbery <rra at debian.org>
Description:
libsaml2-dev - Security Assertion Markup Language library (development)
libsaml2-doc - Security Assertion Markup Language library (API docs)
libsaml7 - Security Assertion Markup Language library (runtime)
opensaml2-schemas - Security Assertion Markup Language library (XML schemas)
opensaml2-tools - Security Assertion Markup Language command-line tools
Changes:
opensaml2 (2.4.3-1) unstable; urgency=high
.
* Set urgency to high for security fix.
* New upstream release.
- SECURITY: Fix vulnerability to a "wrapping attack" that could allow
a remote, unauthenticated attacker to craft messages that can be
successfully verified but contain arbitrary content. This may allow
an attacker to subvert the security of software using OpenSAML and
supply an unauthenticated login identity and data under the guise of
a trusted issuer. (CVE-2011-1411)
- Fix unmarshalling of RespondWith element
- Make library init routines idempotent
* Update the Debian-provided samlsign.1 man page for new flags supported
by the upstream utility.
* Update debian/watch for the new upstream distribution location.
* Update standards version to 3.9.2 (no changes required).
Checksums-Sha1:
20d4c8bb2400040f0efe3a34c73a91a98b5abb6d 1817 opensaml2_2.4.3-1.dsc
1835d1815a1937499a21bcaad09ce2a668e3d793 871693 opensaml2_2.4.3.orig.tar.gz
4ca0830af009e5459a0b7328286b8689b1cad6c1 8343 opensaml2_2.4.3-1.debian.tar.gz
b0b336636fdd98a7b960f03eb4b1045508ada6d6 1361596 libsaml7_2.4.3-1_i386.deb
d2abf712896b54352ce8c509714aa497ce8b2506 51150 libsaml2-dev_2.4.3-1_i386.deb
3e8c8604f270360d6228caf7bebac100403c5038 26848 opensaml2-tools_2.4.3-1_i386.deb
27f787f603f0b8a3cf8be433091467fe459a44b7 30394 opensaml2-schemas_2.4.3-1_all.deb
c9c7d41df03033a309f297c4d8af462e4a210b69 2314488 libsaml2-doc_2.4.3-1_all.deb
Checksums-Sha256:
01489352a6f85ed1126651db52bd88f3840ff5d59f897b3347d5b37a5485206e 1817 opensaml2_2.4.3-1.dsc
850187c7dd664f9216a387bcc9e08f36643f04ddc08d11551e33a46dd15d2539 871693 opensaml2_2.4.3.orig.tar.gz
5d3072a6bb6b4cb5bee32fd251676905f83f28d652ca149e2d9088f7e9c45f0e 8343 opensaml2_2.4.3-1.debian.tar.gz
9c3eb76b519f91e72f96fc491ff8c2361a1d89af3449a6068eef51fb465b952d 1361596 libsaml7_2.4.3-1_i386.deb
78f370b6218e41c7bcc631d3cd6ca8e6a7c59ad4676e6ab28bb674d8b177e741 51150 libsaml2-dev_2.4.3-1_i386.deb
71327d1853421264a40c602b567e97a8934ae6c24ba793fe4cfc523596d27fdd 26848 opensaml2-tools_2.4.3-1_i386.deb
a6a581ff66e9d9a0527b94c6dc60c19082602b05780107fb7d0dfc0bc3dd0338 30394 opensaml2-schemas_2.4.3-1_all.deb
80779023c9e035941d3a9d4934d23796341e239d5f4348270b6ed6a87bcd29da 2314488 libsaml2-doc_2.4.3-1_all.deb
Files:
7fcff61e1900f71899bd14009433e1d1 1817 libs extra opensaml2_2.4.3-1.dsc
368361d56992afafbc6f8190a77ffd53 871693 libs extra opensaml2_2.4.3.orig.tar.gz
96cec54a8d31a2608b0a649da0dde322 8343 libs extra opensaml2_2.4.3-1.debian.tar.gz
206d792cfb5c5a393d0f952aafdb9b37 1361596 libs extra libsaml7_2.4.3-1_i386.deb
6bb636b6f18594e545c512eac5f59dcb 51150 libdevel extra libsaml2-dev_2.4.3-1_i386.deb
4018c666d8f4a7fb3742a319afaa4719 26848 text extra opensaml2-tools_2.4.3-1_i386.deb
ab984acb02566a7e84d9b86e104572f3 30394 text extra opensaml2-schemas_2.4.3-1_all.deb
74a59be868c921b851d9819d298f174e 2314488 doc extra libsaml2-doc_2.4.3-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAABCAAGBQJOLdUBAAoJEH2AMVxXNt51rqgIAK3+IPcyCO2bVr7xFhYP+Eub
IiDcbOFuOHEPBpavay9MXxq7GOpPq0iaZrGB0gXFzOCROK8r/5mDQ3EJLzI6V+Ul
z2/9zOEnew3ozTU9RcBqsKSmAnbDb6g5P/xCdMOEcTDbjMNCukAZ897LLLHlQQiI
0jeZKSitBa2Mc5jYoOq2/aObwC+cjLzxqqZy3z1xi9Cp0kPsdTnxF6NJcpKLDXD1
+7Pg0B70i6PazOs8h7aW5A1PpnCCvsHO2emyKuZ71Vnxkozs6lqp4WXHe5L8Cbim
5im6enx7FTJcQZxvjoy4Ve15Zcn38w3sYhsyTunLIJHlrsh3lDta7k+kfuEaFws=
=cj+D
-----END PGP SIGNATURE-----
Russ Allbery (10):
Minor updates to debian/copyright
Update debian/watch for the new upstream distribution location
Imported Upstream version 2.4.3
Merge commit 'upstream/2.4.3'
Add upstream changes for 2.4.3
Update debian/copyright for the new release
Update the samlsign man page
Set urgency to high
Update standards version to 3.9.2
Finalize changes for 2.4.3-1
-----------------------------------------------------------------------
--
Debian packaging for OpenSAML 2.0
More information about the Pkg-shibboleth-devel
mailing list