[opensaml2] annotated tag debian/2.6.1-1 created (now 9a2a488)

Ferenc Wágner wferi at moszumanska.debian.org
Mon Nov 20 18:37:34 UTC 2017


This is an automated email from the git hooks/post-receive script.

wferi pushed a change to annotated tag debian/2.6.1-1
in repository opensaml2.

        at  9a2a488   (tag)
   tagging  7c314de3de79d4a02638fd630223e86a78e7bf9b (commit)
  replaces  debian/2.6.0-5
 tagged by  Ferenc Wágner
        on  Mon Nov 20 18:55:21 2017 +0100

- Log -----------------------------------------------------------------
opensaml2 Debian release 2.6.1-1

Format: 1.8
Date: Mon, 20 Nov 2017 10:46:24 +0100
Source: opensaml2
Binary: libsaml9 libsaml2-dev opensaml2-tools opensaml2-schemas libsaml2-doc
Architecture: source
Version: 2.6.1-1
Distribution: unstable
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel at lists.alioth.debian.org>
Changed-By: Ferenc Wágner <wferi at debian.org>
Description:
 libsaml2-dev - Security Assertion Markup Language library (development)
 libsaml2-doc - Security Assertion Markup Language library (API docs)
 libsaml9   - Security Assertion Markup Language library (runtime)
 opensaml2-schemas - Security Assertion Markup Language library (XML schemas)
 opensaml2-tools - Security Assertion Markup Language command-line tools
Changes:
 opensaml2 (2.6.1-1) unstable; urgency=high
 .
   * [0c08870] New upstream release (2.6.1)
     Security fix for CVE-2017-16853:
     Rod Widdowson of Steading System Software LLP discovered a coding error in
     the OpenSAML library, causing the DynamicMetadataProvider class to fail
     configuring itself with the filters provided and omitting whatever checks
     they are intended to perform.
   * [0795c42] Refresh our patches
   * [1f742ec] Update Standards-Version to 4.1.1 (no changes needed)
   * [5bed74f] Bump XMLTooling dependency version to 1.6.
     This isn't strictly required, but the stack is always updated in
     lockstep, so why not follow the upstream spec file in this respect.
Checksums-Sha1:
 05e5baa83e42811dc84981ed25a6190970c84a8b 2513 opensaml2_2.6.1-1.dsc
 f5ae1d732aa206f73129cdd74ee0fec1a201a1cf 575533 opensaml2_2.6.1.orig.tar.bz2
 0d6525118e5fddcf59613ff5739c4758bf24b998 63916 opensaml2_2.6.1-1.debian.tar.xz
 bb9925d7f0aebd4624c3a657301dfcaf7c10853f 10039 opensaml2_2.6.1-1_amd64.buildinfo
Checksums-Sha256:
 278a71bf2ee3f22dec2aed5f770f1e614465300c3f50b27d4d93d25c0f941d47 2513 opensaml2_2.6.1-1.dsc
 69516b165858d381fcf1d8ce809c101246824d383aa635a3676648c88b242a83 575533 opensaml2_2.6.1.orig.tar.bz2
 eb8fae0667c71eb44d010ce60949d333abc8279917bca8461402d5c8ae8e971a 63916 opensaml2_2.6.1-1.debian.tar.xz
 dd98c9267806eeb224529f450272c2d9a6151535010e84ad881524a942a3106f 10039 opensaml2_2.6.1-1_amd64.buildinfo
Files:
 609a25a0928a43078f9c65b5c8bae602 2513 libs optional opensaml2_2.6.1-1.dsc
 c3a140e6705eaf80c7984774d93fd68c 575533 libs optional opensaml2_2.6.1.orig.tar.bz2
 72c4d5cacf0b0af15666a0ce58566e4f 63916 libs optional opensaml2_2.6.1-1.debian.tar.xz
 c2aa7601166c5389d40e1130056b4665 10039 libs optional opensaml2_2.6.1-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=MRPq
-----END PGP SIGNATURE-----

Ferenc Wágner (6):
      New upstream version 2.6.1
      Merge tag 'upstream/2.6.1' into debian/master
      Refresh our patches
      Update Standards-Version to 4.1.1 (no changes needed)
      Bump XMLTooling dependency version to 1.6
      Update changelog for 2.6.1-1 release

Rod Widdowson (7):
      VC14 build - move interm director from the Project to the BUILD tree
      Ignore .vs directories
      CPPOST-94: VC17 initial cut
      CPPXT-121 Add strict overflow checking
      CPPXT-121 Fix potential signed overflow
      Untabify
      CPPOST-99 Compare the hash of the entotyId when doing artefact lookup

Scott Cantor (7):
      Eclipse settings change.
      Bump version to 2.6.1
      Fix inconsistent log category.
      Update library version
      CPPOST-100 - Assertions20SchemaValidator requires unencrypted Attributes
      CPPOST-105
      Undo strict-overflow warning, fails on older gcc

-----------------------------------------------------------------------

This annotated tag includes the following new commits:

       new  1f742ec   Update Standards-Version to 4.1.1 (no changes needed)
       new  5bed74f   Bump XMLTooling dependency version to 1.6
       new  7c314de   Update changelog for 2.6.1-1 release

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-shibboleth/opensaml2.git



More information about the Pkg-shibboleth-devel mailing list