-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 24 Sep 2009 21:11:11 -0700 Source: opensaml Binary: libsaml5 libsaml-dev opensaml-schemas Architecture: source i386 all Version: 1.1a-2+etch1 Distribution: oldstable-security Urgency: high Maintainer: Quanah Gibson-Mount <quanah@stanford.edu> Changed-By: Russ Allbery <rra@debian.org> Description: libsaml-dev - C++ library for Security Assertion Markup Language (development) libsaml5 - C++ library for Security Assertion Markup Language (runtime) opensaml-schemas - XML schemas for OpenSAML Changes: opensaml (1.1a-2+etch1) oldstable-security; urgency=high . * SECURITY: Correctly handle decoding of malformed URLs, closing a possibly exploitable buffer overflow. See <http://shibboleth.internet2.edu/secadv/secadv_20090826.txt> Files: 22bd6bcc0595e9ae32b141121bbc10f7 774 libs optional opensaml_1.1a-2+etch1.dsc e50f19dc742bdb6669f823f76f9ced12 431727 libs optional opensaml_1.1a.orig.tar.gz 485ae33e08081e21c2b882f2052a86be 11333 libs optional opensaml_1.1a-2+etch1.diff.gz 0bd1e63846ba5902f12ee31fbca528bf 248282 libs optional libsaml5_1.1a-2+etch1_i386.deb fea42fa963a77abddff862f40b31e342 463948 libdevel optional libsaml-dev_1.1a-2+etch1_i386.deb 7c7bfa1ccfb3546ca93dd5d9d5c4e063 18224 text optional opensaml-schemas_1.1a-2+etch1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkq+nZMACgkQ+YXjQAr8dHYBuACdFu9o0+SGMdwAL7Z6KTn6cFQf mtkAn1ODMWjlpw0VpEEZJjdlu3zAHj3u =fl2S -----END PGP SIGNATURE----- Accepted: libsaml-dev_1.1a-2+etch1_i386.deb to pool/main/o/opensaml/libsaml-dev_1.1a-2+etch1_i386.deb libsaml5_1.1a-2+etch1_i386.deb to pool/main/o/opensaml/libsaml5_1.1a-2+etch1_i386.deb opensaml-schemas_1.1a-2+etch1_all.deb to pool/main/o/opensaml/opensaml-schemas_1.1a-2+etch1_all.deb opensaml_1.1a-2+etch1.diff.gz to pool/main/o/opensaml/opensaml_1.1a-2+etch1.diff.gz opensaml_1.1a-2+etch1.dsc to pool/main/o/opensaml/opensaml_1.1a-2+etch1.dsc