-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 02 Dec 2009 22:15:50 -0800
Source: shibboleth-sp
Binary: libapache2-mod-shib libshib6 libshib-dev libshib-target5
Architecture: source i386
Version: 1.3f.dfsg1-2+etch2
Distribution: oldstable-security
Urgency: high
Maintainer: Quanah Gibson-Mount <quanah@stanford.edu>
Changed-By: Russ Allbery <rra@debian.org>
Description:
libapache2-mod-shib - Shibboleth implements the OASIS SAML v1.1 specification,
libshib-dev - Shibboleth federated authorization system (development)
libshib-target5 - Shibboleth implements the OASIS SAML v1.1 specification,
libshib6 - Shibboleth federated authorization system (development)
Changes:
shibboleth-sp (1.3f.dfsg1-2+etch2) oldstable-security; urgency=high
.
* SECURITY: Fix improper handling of URLs that could be abused for
script injection and other cross-site scripting attacks.
(CVE-2009-3300)
Files:
4b81922200999d83b4e6e300dc4105b2 957 web optional shibboleth-sp_1.3f.dfsg1-2+etch2.dsc
ce866f75fd4a3e360bcf1f40328a6775 35169 web optional shibboleth-sp_1.3f.dfsg1-2+etch2.diff.gz
4d36fe53ea41d60d8a9271a8283f982e 433480 libdevel extra libshib-dev_1.3f.dfsg1-2+etch2_i386.deb
2e8ccdf193b826c7edea81d64928e306 76582 libs optional libshib6_1.3f.dfsg1-2+etch2_i386.deb
43e1ccf246c06173bb0b726435f0d815 201376 libs optional libshib-target5_1.3f.dfsg1-2+etch2_i386.deb
706787e36afd27879765043b36e21b67 3717328 web optional libapache2-mod-shib_1.3f.dfsg1-2+etch2_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkscIJwACgkQ+YXjQAr8dHZ1SACg1xqpV0XfNYOjlg/gOth3PHh6
WYYAoIFEBvoyyDCdGpRAh2OEZIUzn9+q
=YouY
-----END PGP SIGNATURE-----
Accepted:
libapache2-mod-shib_1.3f.dfsg1-2+etch2_i386.deb
to main/s/shibboleth-sp/libapache2-mod-shib_1.3f.dfsg1-2+etch2_i386.deb
libshib-dev_1.3f.dfsg1-2+etch2_i386.deb
to main/s/shibboleth-sp/libshib-dev_1.3f.dfsg1-2+etch2_i386.deb
libshib-target5_1.3f.dfsg1-2+etch2_i386.deb
to main/s/shibboleth-sp/libshib-target5_1.3f.dfsg1-2+etch2_i386.deb
libshib6_1.3f.dfsg1-2+etch2_i386.deb
to main/s/shibboleth-sp/libshib6_1.3f.dfsg1-2+etch2_i386.deb
shibboleth-sp_1.3f.dfsg1-2+etch2.diff.gz
to main/s/shibboleth-sp/shibboleth-sp_1.3f.dfsg1-2+etch2.diff.gz
shibboleth-sp_1.3f.dfsg1-2+etch2.dsc
to main/s/shibboleth-sp/shibboleth-sp_1.3f.dfsg1-2+etch2.dsc
