Accepted simplesamlphp 1.13.1-2+deb8u2 (source all) into oldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 29 Jun 2018 18:55:01 +0200
Source: simplesamlphp
Binary: simplesamlphp
Architecture: source all
Version: 1.13.1-2+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Thijs Kinkhorst <thijs@debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
simplesamlphp - Authentication and federation application supporting several prot
Changes:
simplesamlphp (1.13.1-2+deb8u2) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* Fix CVE-2017-12872: Multiple timing side-channel issues
(use the patch for CVE-2017-12868 too, just for completeness
as Jessies php version normally contains hash_equals())
Checksums-Sha1:
e6a2d5ae92d7e23595b48fd08732629ba09baeee 2107 simplesamlphp_1.13.1-2+deb8u2.dsc
23d83ed52be2d3ed94ddb31a711df465d42baa71 2303426 simplesamlphp_1.13.1.orig.tar.gz
aec2e6f20e01787217cac31475b375262de86ae6 12208 simplesamlphp_1.13.1-2+deb8u2.debian.tar.xz
11b31a25907c47d9e5c7e764d0b40bd7432460ff 1560342 simplesamlphp_1.13.1-2+deb8u2_all.deb
Checksums-Sha256:
9a97d9c19c27ec46106cd94656a3a720438717ca712a16762b76f683a63e0781 2107 simplesamlphp_1.13.1-2+deb8u2.dsc
f8c22ada724b4628257f7415a397f9b0bb2ffd5d036380c5bff6830a33bb613f 2303426 simplesamlphp_1.13.1.orig.tar.gz
19b44fa7c245aa84abe918550c86ce37203de184ae51842f52cfd872da1775ac 12208 simplesamlphp_1.13.1-2+deb8u2.debian.tar.xz
1d572868308f503a874de232fa6ad238e189dfa30137d556d9046772f18d53ed 1560342 simplesamlphp_1.13.1-2+deb8u2_all.deb
Files:
ebfe60e96da75306583f6be383459705 2107 web extra simplesamlphp_1.13.1-2+deb8u2.dsc
ceda3ee3b084d3bef3d25a99de9a8e80 2303426 web extra simplesamlphp_1.13.1.orig.tar.gz
19dbfc9a7ea7d552e5714b45c413f75c 12208 web extra simplesamlphp_1.13.1-2+deb8u2.debian.tar.xz
9cd7820277d9fa38c9934ce1d9c0d6a8 1560342 web extra simplesamlphp_1.13.1-2+deb8u2_all.deb
-----BEGIN PGP SIGNATURE-----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=/zux
-----END PGP SIGNATURE-----
Reply to: