-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 23 Nov 2018 19:03:02 +0100
Source: xml-security-c
Binary: libxml-security-c17 libxml-security-c-dev xml-security-c-utils
Architecture: source amd64
Version: 1.7.2-3+deb8u2
Distribution: jessie-security
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel@lists.alioth.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
libxml-security-c-dev - C++ library for XML Digital Signatures (development)
libxml-security-c17 - C++ library for XML Digital Signatures (runtime)
xml-security-c-utils - C++ library for XML Digital Signatures (utilities)
Changes:
xml-security-c (1.7.2-3+deb8u2) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS Team.
* temporary issue, no CVE assigned yet
Different KeyInfo combinations, like signatures without public key,
result in incomplete DSA structures that crash openssl during
verification.
Checksums-Sha1:
d9cad86d9e3a2f5e51a49358ecfad20c707a1ce5 2398 xml-security-c_1.7.2-3+deb8u2.dsc
fee59d5347ff0666802c8e5aa729e0304ee492bc 875465 xml-security-c_1.7.2.orig.tar.gz
a7153b4a549f43ae9c6e4d1ca51438fa3d639e26 17376 xml-security-c_1.7.2-3+deb8u2.debian.tar.xz
ca3afcc14da7dab27b74500d72175f79a483a1d0 269340 libxml-security-c17_1.7.2-3+deb8u2_amd64.deb
3366d15379a5752f2f5abd773af33d4bf67aa057 112478 libxml-security-c-dev_1.7.2-3+deb8u2_amd64.deb
8aa552da06904b2871d4dd85aacf2f738e7144e9 122230 xml-security-c-utils_1.7.2-3+deb8u2_amd64.deb
Checksums-Sha256:
16f1f3289ec178ce1ab36db1bbb920bad42b5c3b79ddfb8b20b54ed2f99ed8cf 2398 xml-security-c_1.7.2-3+deb8u2.dsc
d576b07bb843eaebfde3be01301db40504ea8e8e477c0ad5f739b07022445452 875465 xml-security-c_1.7.2.orig.tar.gz
46908d7419fb204d3a7f7066a9e33f7f5307e1c68613980db4d9635be5cc8ac1 17376 xml-security-c_1.7.2-3+deb8u2.debian.tar.xz
d3991782a3966a958322193a97ceff8cdb87590ff8ad464ea74bfc08db7c2bb4 269340 libxml-security-c17_1.7.2-3+deb8u2_amd64.deb
cc33888f6065950b6237a47fe9c26c7441bec6482444c165955f1fc3b9dd7dd1 112478 libxml-security-c-dev_1.7.2-3+deb8u2_amd64.deb
74ee133dcc14c6b363ed831ebab18822b9e769c64e01bfa06d54124ee023eaf0 122230 xml-security-c-utils_1.7.2-3+deb8u2_amd64.deb
Files:
11c0b365a71b76e6a605190512153b69 2398 libs extra xml-security-c_1.7.2-3+deb8u2.dsc
2487e00569f6465f7070389e40a3d84f 875465 libs extra xml-security-c_1.7.2.orig.tar.gz
67cbf39160ebc6392145581f35016420 17376 libs extra xml-security-c_1.7.2-3+deb8u2.debian.tar.xz
ada02bc903571b807a89ba1c200fbf7e 269340 libs extra libxml-security-c17_1.7.2-3+deb8u2_amd64.deb
d9414250c2460466ea891eaaeedfe093 112478 libdevel extra libxml-security-c-dev_1.7.2-3+deb8u2_amd64.deb
db95f8456d0fdf4494fb19af59c1fac1 122230 utils extra xml-security-c-utils_1.7.2-3+deb8u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=0L4B
-----END PGP SIGNATURE-----
