Accepted xmltooling 1.3.1-1~bpo50+1 (source i386 all)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 11 Nov 2009 16:38:16 -0800
Source: xmltooling
Binary: libxmltooling4 libxmltooling-dev xmltooling-schemas libxmltooling-doc
Architecture: source i386 all
Version: 1.3.1-1~bpo50+1
Distribution: lenny-backports
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel@lists.alioth.debian.org>
Changed-By: Russ Allbery <rra@debian.org>
Description:
libxmltooling-dev - C++ XML parsing library with encryption support (development)
libxmltooling-doc - C++ XML parsing library with encryption support (API docs)
libxmltooling4 - C++ XML parsing library with encryption support (runtime)
xmltooling-schemas - XML schemas for XMLTooling
Changes:
xmltooling (1.3.1-1~bpo50+1) lenny-backports; urgency=low
.
* Backport to stable.
* Build against libxerces-c2-dev instead of libxerces-c-dev.
.
xmltooling (1.3.1-1) unstable; urgency=high
.
* Urgency set to high for security fix.
* New upstream release.
- SECURITY: Partial fix for improper handling of URLs that could be
abused for script injection and other cross-site scripting attacks.
The complete fix also requires newer opensaml2 and shibboleth-sp2
packages. (CVE-2009-3300)
- Add setter for KeyInfoResolver object.
- Fix extraction of cert info for UTF-8 handling changes.
- Fix passing of TransportOption configuration to cURL.
- Fix instability in reusing a DOM after signing it.
- Remove xmlns:xml namespace declaration when marshalling and
unmarshalling to avoid canonicalization bugs.
* Rename library package for upstream SONAME bump.
* Build-depend on libxml-security-c-dev 1.5 or later and make
libxmltooling-dev depend on libxml-security-c-dev 1.5 or later to
ensure that all builds are consistent. Although this package will
build with 1.4, the other packages built on xmltooling require 1.5.
Checksums-Sha1:
b59e9d18b707d1ca082bebe0f968340bf0c35afc 1476 xmltooling_1.3.1-1~bpo50+1.dsc
5ed15af1fde9fcce25b6c30f4760fed691f72b0c 580340 xmltooling_1.3.1.orig.tar.gz
bb592687c7fa31a4a7ac60f89bc33b97c1cb1e16 6952 xmltooling_1.3.1-1~bpo50+1.diff.gz
fa753a2b83e388aad01d86445c0e7936b9928dbc 749946 libxmltooling4_1.3.1-1~bpo50+1_i386.deb
503c75d418e28ae823194c955b13e25b09bd176e 75686 libxmltooling-dev_1.3.1-1~bpo50+1_i386.deb
5973e746a38bbc241dc0eace465e2bcc6b6076e7 12846 xmltooling-schemas_1.3.1-1~bpo50+1_all.deb
64b13ecca2c264a3d4fa2eefd5573657a49744b2 964626 libxmltooling-doc_1.3.1-1~bpo50+1_all.deb
Checksums-Sha256:
0f64c828bd50f7b71f7811a960401a0b26857c0bedd413862bf5b246b59ff910 1476 xmltooling_1.3.1-1~bpo50+1.dsc
be6a77a750ee629e3d85e8ffd60c66acfc5db31ee2c413aa804b9b661141b47f 580340 xmltooling_1.3.1.orig.tar.gz
d5995bb76b414252ba52a38fdeb208cc6a8357c5b3444f08a71e350cd9b91d94 6952 xmltooling_1.3.1-1~bpo50+1.diff.gz
39981e4525436e75c87d80718f8e7d07d2acc90b614e207ee602b1e30f138e84 749946 libxmltooling4_1.3.1-1~bpo50+1_i386.deb
3c67ba194a5133a5d18804e78fc38c0935a14465bd1fab15b20c04a92002cb3c 75686 libxmltooling-dev_1.3.1-1~bpo50+1_i386.deb
382e726f4b604b7cae4673cccdca1d75ebc7f65669ff71bcaa6e0d8e712c2d13 12846 xmltooling-schemas_1.3.1-1~bpo50+1_all.deb
32d55241b3df6d1bea85215a400e501697d49adbef3f6b6c0d2e131702df8f1f 964626 libxmltooling-doc_1.3.1-1~bpo50+1_all.deb
Files:
0c3ecf3a4af8308f38af3fc7ac356fa3 1476 libs extra xmltooling_1.3.1-1~bpo50+1.dsc
bde914f9c5742c9e01ec06a091423553 580340 libs extra xmltooling_1.3.1.orig.tar.gz
68e75ba94e4b9ed742979cc1e6db1812 6952 libs extra xmltooling_1.3.1-1~bpo50+1.diff.gz
2fa5ec47763ddd22e4336ea0368f11e8 749946 libs extra libxmltooling4_1.3.1-1~bpo50+1_i386.deb
e4076339037917704c1cb0b87d589e8f 75686 libdevel extra libxmltooling-dev_1.3.1-1~bpo50+1_i386.deb
b1fbf04d083c37f4f9c7834a5da563cb 12846 text extra xmltooling-schemas_1.3.1-1~bpo50+1_all.deb
9af56744c783a1997ea14a4c6abd075d 964626 doc extra libxmltooling-doc_1.3.1-1~bpo50+1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkr7XCUACgkQ+YXjQAr8dHa9rQCdGzoZIK496G1UkQj17uIJEIOi
D8sAoKMnDzGECcoXGA2eVzjk8TMNn9MR
=bTjf
-----END PGP SIGNATURE-----
Accepted:
libxmltooling-dev_1.3.1-1~bpo50+1_i386.deb
to pool/main/x/xmltooling/libxmltooling-dev_1.3.1-1~bpo50+1_i386.deb
libxmltooling-doc_1.3.1-1~bpo50+1_all.deb
to pool/main/x/xmltooling/libxmltooling-doc_1.3.1-1~bpo50+1_all.deb
libxmltooling4_1.3.1-1~bpo50+1_i386.deb
to pool/main/x/xmltooling/libxmltooling4_1.3.1-1~bpo50+1_i386.deb
xmltooling-schemas_1.3.1-1~bpo50+1_all.deb
to pool/main/x/xmltooling/xmltooling-schemas_1.3.1-1~bpo50+1_all.deb
xmltooling_1.3.1-1~bpo50+1.diff.gz
to pool/main/x/xmltooling/xmltooling_1.3.1-1~bpo50+1.diff.gz
xmltooling_1.3.1-1~bpo50+1.dsc
to pool/main/x/xmltooling/xmltooling_1.3.1-1~bpo50+1.dsc
xmltooling_1.3.1.orig.tar.gz
to pool/main/x/xmltooling/xmltooling_1.3.1.orig.tar.gz
Reply to: