[SCM] Debian packaging for XML-Security-C annotated tag, debian/1.7.1-1, created. debian/1.7.1-1
Russ Allbery
rra at debian.org
Tue Jun 18 04:36:57 UTC 2013
The annotated tag, debian/1.7.1-1 has been created
at 4edeb14bc024452b4c43dc12354f68d3d05d826a (tag)
tagging bbed522d0c134a702188b4a58dd4ef97c6ea6256 (commit)
replaces debian/1.7.0-1
tagged by Russ Allbery
on Mon Jun 17 21:35:54 2013 -0700
- Shortlog ------------------------------------------------------------
Debian release 1.7.1-1
Format: 1.8
Date: Mon, 17 Jun 2013 21:27:58 -0700
Source: xml-security-c
Binary: libxml-security-c17 libxml-security-c-dev xml-security-c-utils
Architecture: source i386
Version: 1.7.1-1
Distribution: experimental
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel at lists.alioth.debian.org>
Changed-By: Russ Allbery <rra at debian.org>
Description:
libxml-security-c-dev - C++ library for XML Digital Signatures (development)
libxml-security-c17 - C++ library for XML Digital Signatures (runtime)
xml-security-c-utils - C++ library for XML Digital Signatures (utilities)
Changes:
xml-security-c (1.7.1-1) experimental; urgency=high
.
* New upstream release.
- Fix a spoofing vulnerability that allows an attacker to reuse
existing signatures with arbitrary content. (CVE-2013-2153)
- Fix a stack overflow in the processing of malformed XPointer
expressions in the XML Signature Reference processing code.
(CVE-2013-2154)
- Fix processing of the output length of an HMAC-based XML Signature
that could cause a denial of service when processing specially
chosen input. (CVE-2013-2155)
- Fix a heap overflow in the processing of the PrefixList attribute
optionally used in conjunction with Exclusive Canonicalization,
potentially allowing arbitrary code execution. (CVE-2013-2156)
- Reduce entity expansion limits when parsing.
- New --id option to the xenc-checksig utility.
* Rename the binaries in the xml-security-c-utils package to start with
xsec-* instead of xmlsec-*. This reflects the common abbreviation
used by the package.
Checksums-Sha1:
4da37c984346235f478312fcd389d92b1491f402 1301 xml-security-c_1.7.1-1.dsc
4253f691fe2cde5bc4a3bdf557b9566eb1c769e6 875367 xml-security-c_1.7.1.orig.tar.gz
17b6ddbfc01e507dc46e3aa8ea0c162f6bc4016e 11932 xml-security-c_1.7.1-1.debian.tar.xz
a9ed8e54e7ea498519004332ba9c05a590aea94b 286096 libxml-security-c17_1.7.1-1_i386.deb
53bf31f135735dc1a4e77f770583ddca139f0158 110762 libxml-security-c-dev_1.7.1-1_i386.deb
a8919b98311177acd6d011286a857eaa5504ca69 122612 xml-security-c-utils_1.7.1-1_i386.deb
Checksums-Sha256:
3ad17c63c5f4b100ce460522f79b58e5e9c50c726e08082875f714cfe49fcfa8 1301 xml-security-c_1.7.1-1.dsc
3d306660702d620b30605627f970b90667ed967211a8fc26b3243e6d3abeb32e 875367 xml-security-c_1.7.1.orig.tar.gz
096a7a3231e6aa0f2d22ae40adf608230fb336bed205d3d808a079249c4470a5 11932 xml-security-c_1.7.1-1.debian.tar.xz
16fc6f7e41f35b6874c51cdbc4053c8e421c4f3547af5c43968344be1425e382 286096 libxml-security-c17_1.7.1-1_i386.deb
5a1a70565ff675ab9ffd45792529ff14bf72aab1154e644df828183bf2def0dd 110762 libxml-security-c-dev_1.7.1-1_i386.deb
0fbdbc4c908b5c24983889885f851f7b923ba8ed36eef68da03b62d10f617697 122612 xml-security-c-utils_1.7.1-1_i386.deb
Files:
38597cdece45f21e651db36536d11175 1301 libs extra xml-security-c_1.7.1-1.dsc
cce922e188afcd557636c53c58113bae 875367 libs extra xml-security-c_1.7.1.orig.tar.gz
1ac3f4939b70531398384f2dbca5a9a0 11932 libs extra xml-security-c_1.7.1-1.debian.tar.xz
d4dab530ca022ed3d43b47804ad0c21b 286096 libs extra libxml-security-c17_1.7.1-1_i386.deb
47eb510cb43054bf6269f34adb641325 110762 libdevel extra libxml-security-c-dev_1.7.1-1_i386.deb
e181455bc78dfd4e05288f82138d1128 122612 utils extra xml-security-c-utils_1.7.1-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iQEcBAABCAAGBQJRv+O4AAoJEH2AMVxXNt51YdIIALn2wkrtLYFd/j/p10T/68OW
jq3LkZF/7Sll/4JHERMjDQHT0qQGUReX7m9sueyMR4JBsp48qCs0zE86ly1xxsky
493USV0o8z1SMD67XmU7yNpz5y1F9rEw0KP7b3YdNh3/mzUK3k9znqe17SaktG3X
/I4ttFtYLz6ASFZ+i9VIRNGVwWCAxGzCbPBwzE6RR/MsCRW0d0vn7BVPXXEi8wah
SF4XHKkOF7zCsJCap0F1zY5O19v9kI4znKKJLVeFFTzWPExwZNmKrZaGWcOZJ4Ep
yIZIsr/NkU6PmCta9N+CeU79EDPg29oGa6aHnfDPvuH1G4B14AbgNYCaovlJ4A4=
=SU++
-----END PGP SIGNATURE-----
Russ Allbery (11):
Imported Upstream version 1.7.1
Merge tag 'upstream/1.7.1'
Add changelog for upstream 1.7.1 release
Update debian/copyright for the new upstream release
Note new checksig --id option in changelog and man page
Rename all the man pages to use the new xsec-* prefix
Rename all tools to have an xsec-* prefix
Merge branch 'fixes/utility-names'
Rename the binaries to xsec-* instead of xmlsec-*
Fix spelling error in changelog
Finalize changes for 1.7.1-1
-----------------------------------------------------------------------
--
Debian packaging for XML-Security-C
More information about the Pkg-shibboleth-devel
mailing list