Accepted simplesamlphp 1.9.2-1+deb7u2 (source all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 05 Feb 2018 11:14:11 +0530
Source: simplesamlphp
Binary: simplesamlphp
Architecture: source all
Version: 1.9.2-1+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Thijs Kinkhorst <thijs@debian.org>
Changed-By: Abhijith PA <abhijith@disroot.org>
Description:
simplesamlphp - Authentication and federation application supporting several prot
Changes:
simplesamlphp (1.9.2-1+deb7u2) wheezy-security; urgency=high
.
* Non-maintainer upload by the Debian LTS Team.
* Fix CVE-2017-18122: Signature validation bypass
* Fix CVE-2017-18121: Cross Site Scripting (XSS) in the consentAdmin module
* Fix CVE-2018-6521: Use of insecure connection charset (sqlauth module)
Checksums-Sha1:
d4fbff6b656437e9ae0ea1b50fabf24706cc2415 2087 simplesamlphp_1.9.2-1+deb7u2.dsc
d52ed467826fb58e2709ef8d9a2df88d0ce19667 12187 simplesamlphp_1.9.2-1+deb7u2.debian.tar.gz
ffa841c6142c13d466b46e2b82d3e77a93e1aa7f 1603266 simplesamlphp_1.9.2-1+deb7u2_all.deb
Checksums-Sha256:
9ee4ec3de00ff008b209fa9ff8c7ec73c14bb0a55f514764f120e2838ad8fe22 2087 simplesamlphp_1.9.2-1+deb7u2.dsc
1468d82500756cae84cd0ab0f1522bb82f1f1c357c96f3a6c03f5911a6ae6eb1 12187 simplesamlphp_1.9.2-1+deb7u2.debian.tar.gz
82dc8e1d3cdde889505d21b49aac25bc5c64e3581dac09bdaee35789c9e937eb 1603266 simplesamlphp_1.9.2-1+deb7u2_all.deb
Files:
c7a597cf36fadfba4dbf55a333579539 2087 web extra simplesamlphp_1.9.2-1+deb7u2.dsc
e218237f2fa15b18d1d7d1bd2c2891df 12187 web extra simplesamlphp_1.9.2-1+deb7u2.debian.tar.gz
96da2c84e9512026966bfb3934521f2a 1603266 web extra simplesamlphp_1.9.2-1+deb7u2_all.deb
-----BEGIN PGP SIGNATURE-----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=8pwn
-----END PGP SIGNATURE-----
Reply to: