Accepted webauth 3.6.2-1~bpo50+1 (source i386 all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Tue, 08 Sep 2009 15:53:39 -0700
Source: webauth
Binary: libapache2-webauth libapache2-webkdc libwebauth-perl libwebauth1 libwebauth1-dev libwebkdc-perl webauth-tests webauth-utils webauth-weblogin
Architecture: source i386 all
Version: 3.6.2-1~bpo50+1
Distribution: lenny-backports
Urgency: high
Maintainer: Russ Allbery <rra@debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
libapache2-webauth - Apache 2 modules for WebAuth authentication
libapache2-webkdc - Apache 2 modules for a WebAuth authentication KDC
libwebauth-perl - Perl library for WebAuth authentication
libwebauth1 - Shared libraries for WebAuth authentication
libwebauth1-dev - Development files for WebAuth authentication
libwebkdc-perl - Perl libraries for WebAuth central login server
webauth-tests - Tests for the WebAuth authentication modules
webauth-utils - Command-line utilities for WebAuth authentication
webauth-weblogin - Central login server for WebAuth authentication
Changes:
webauth (3.6.2-1~bpo50+1) lenny-backports; urgency=low
.
* Backport to stable.
.
webauth (3.6.2-1) unstable; urgency=high
.
* New upstream release.
- CVE-2009-2945: When generating a redirect to test for cookie
support, be sure not to include a password in the URL. Reject
username/password logins via methods other than POST.
- If the user submits the login form via POST without the test cookie,
assume the browser supports cookies and don't probe.
- New script (in /usr/share/doc/webauth-weblogin/weblogin-passcheck)
to find passwords exposed by CVE-2009-2945.
.
webauth (3.6.1-2) unstable; urgency=low
.
* Do not install the libwebauth.la file. Libtool *.la files force other
packages using Libtool to declare excessive library dependencies.
* Update standards version to 3.8.3 (no changes required).
Checksums-Sha1:
261e7d2d39e265a1fd776257cf6d0417692f1f64 1358 webauth_3.6.2-1~bpo50+1.dsc
ef312614f65fd5d11fd62d776390afcf6be90449 670896 webauth_3.6.2.orig.tar.gz
6eb9e658ae8747e485536749746c94d60d15b36a 17507 webauth_3.6.2-1~bpo50+1.diff.gz
c4d04998a21d43729fb010fd1600eee95c01fd1d 195564 libapache2-webauth_3.6.2-1~bpo50+1_i386.deb
a58afce9140fd1ce8e740dd1bca3c48c7bbb7ecc 73364 libapache2-webkdc_3.6.2-1~bpo50+1_i386.deb
138ce1fdee146c5635b3299cf5dfdc0c47e87a9e 54384 libwebauth-perl_3.6.2-1~bpo50+1_i386.deb
b896120bec2ea3c59d91e5d64a2924449e6daf85 41044 libwebauth1_3.6.2-1~bpo50+1_i386.deb
316e6715ecdd3869d2eb485af9115952685f1dad 49140 libwebauth1-dev_3.6.2-1~bpo50+1_i386.deb
aa6a6bf88afb3aafefc5f8bff5cce9bbffb9fd8b 29046 webauth-utils_3.6.2-1~bpo50+1_i386.deb
90f32975e7d321ff48bc3f9752c4dab759106f46 43774 libwebkdc-perl_3.6.2-1~bpo50+1_all.deb
dfbf6e2e5200fd17cd0e6388afec6ac02d1c0300 30494 webauth-tests_3.6.2-1~bpo50+1_all.deb
06ec37b4882dfd5303bc47839b3fccd0afab03c5 84130 webauth-weblogin_3.6.2-1~bpo50+1_all.deb
Checksums-Sha256:
6546ebca3b67cab5f6302caaccba8007adc2994490b5de76380ae65a411aac70 1358 webauth_3.6.2-1~bpo50+1.dsc
e5a448abbe091e4e77113cfafa02257cfc05ead1767d17540e3628a272239b6c 670896 webauth_3.6.2.orig.tar.gz
72636ce926d5d07222c289cefbc0c1492df411402649a6908fa9eedbd80564b7 17507 webauth_3.6.2-1~bpo50+1.diff.gz
16d2a1db055593746f2c4d14ac6f75ed199d396fc26af8aa1de228cbfd162466 195564 libapache2-webauth_3.6.2-1~bpo50+1_i386.deb
0d30d6adcd79977c49cd278c4620e5abd0311c41e4658c83a4406c6203d129a8 73364 libapache2-webkdc_3.6.2-1~bpo50+1_i386.deb
9d452129b3e59e524d4b491fde80e698c99b5d695a8c91775ec8163394534c0c 54384 libwebauth-perl_3.6.2-1~bpo50+1_i386.deb
d656f31c8570878079554399efa4694fc95cb4e4c8643b9c013d9748911a80a4 41044 libwebauth1_3.6.2-1~bpo50+1_i386.deb
ad364b49523d7b1ea59e36909e3011f63e9ab2114f89e649f8c23bbe650eb4c7 49140 libwebauth1-dev_3.6.2-1~bpo50+1_i386.deb
ab8abdbd6c9d4f9093f52710c95b13c959d3d46fdc7fbc2418f8fc2e1e2eb07b 29046 webauth-utils_3.6.2-1~bpo50+1_i386.deb
df09e2f910b374f850eb803f2ccfc80f36438a250a5068d3093462a42f0471e5 43774 libwebkdc-perl_3.6.2-1~bpo50+1_all.deb
1e86194189246e7ceb8234dea932090a97a9e5b970039f8f96e127d0df1e93c6 30494 webauth-tests_3.6.2-1~bpo50+1_all.deb
9296e177ede1046d01435e02110c0fa875480f95c906d30ab463806370276d80 84130 webauth-weblogin_3.6.2-1~bpo50+1_all.deb
Files:
529bda033ee1fb259dafdd397070d0db 1358 web optional webauth_3.6.2-1~bpo50+1.dsc
d2bdddb6e48c710c95c713dc1dade414 670896 web optional webauth_3.6.2.orig.tar.gz
f8aa892b0d4a96085768371d10e32194 17507 web optional webauth_3.6.2-1~bpo50+1.diff.gz
94152205eaff09cf40dbfec09e5ba136 195564 httpd optional libapache2-webauth_3.6.2-1~bpo50+1_i386.deb
55ffdaf7632e0a1110346f19b41be131 73364 httpd optional libapache2-webkdc_3.6.2-1~bpo50+1_i386.deb
228d29d5d8a5e1946739b8460ffd5f03 54384 perl optional libwebauth-perl_3.6.2-1~bpo50+1_i386.deb
64da6a37ab609969ec3f52f148a36666 41044 libs optional libwebauth1_3.6.2-1~bpo50+1_i386.deb
a2da1d0c292538e9c4ccaf50a1719988 49140 libdevel extra libwebauth1-dev_3.6.2-1~bpo50+1_i386.deb
a767ed08c16b385d326125b815a4bed9 29046 web optional webauth-utils_3.6.2-1~bpo50+1_i386.deb
04eb8419eb5d3eaed7356e358a24ba68 43774 perl optional libwebkdc-perl_3.6.2-1~bpo50+1_all.deb
58bb4eeed9c699ec0cb0ef505b9a6e13 30494 web optional webauth-tests_3.6.2-1~bpo50+1_all.deb
f946ccaeb3de7226a93d2c5495d3c9b6 84130 web optional webauth-weblogin_3.6.2-1~bpo50+1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
iEYEARECAAYFAkqpVVUACgkQ+YXjQAr8dHYl6ACgmdDrlqGtf5nmk7GVYzVVrRRW
rDcAoM3tjqwQS1UhXk0YZH7tZ4wXxeWe
=nnuC
-----END PGP SIGNATURE-----
Accepted:
libapache2-webauth_3.6.2-1~bpo50+1_i386.deb
to pool/main/w/webauth/libapache2-webauth_3.6.2-1~bpo50+1_i386.deb
libapache2-webkdc_3.6.2-1~bpo50+1_i386.deb
to pool/main/w/webauth/libapache2-webkdc_3.6.2-1~bpo50+1_i386.deb
libwebauth-perl_3.6.2-1~bpo50+1_i386.deb
to pool/main/w/webauth/libwebauth-perl_3.6.2-1~bpo50+1_i386.deb
libwebauth1-dev_3.6.2-1~bpo50+1_i386.deb
to pool/main/w/webauth/libwebauth1-dev_3.6.2-1~bpo50+1_i386.deb
libwebauth1_3.6.2-1~bpo50+1_i386.deb
to pool/main/w/webauth/libwebauth1_3.6.2-1~bpo50+1_i386.deb
libwebkdc-perl_3.6.2-1~bpo50+1_all.deb
to pool/main/w/webauth/libwebkdc-perl_3.6.2-1~bpo50+1_all.deb
webauth-tests_3.6.2-1~bpo50+1_all.deb
to pool/main/w/webauth/webauth-tests_3.6.2-1~bpo50+1_all.deb
webauth-utils_3.6.2-1~bpo50+1_i386.deb
to pool/main/w/webauth/webauth-utils_3.6.2-1~bpo50+1_i386.deb
webauth-weblogin_3.6.2-1~bpo50+1_all.deb
to pool/main/w/webauth/webauth-weblogin_3.6.2-1~bpo50+1_all.deb
webauth_3.6.2-1~bpo50+1.diff.gz
to pool/main/w/webauth/webauth_3.6.2-1~bpo50+1.diff.gz
webauth_3.6.2-1~bpo50+1.dsc
to pool/main/w/webauth/webauth_3.6.2-1~bpo50+1.dsc
webauth_3.6.2.orig.tar.gz
to pool/main/w/webauth/webauth_3.6.2.orig.tar.gz
Reply to: