-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 13 Mar 2017 13:06:19 +0000 Source: libapache2-mod-auth-mellon Binary: libapache2-mod-auth-mellon Architecture: source amd64 Version: 0.12.0-2 Distribution: unstable Urgency: high Maintainer: Thijs Kinkhorst <thijs@debian.org> Changed-By: Thijs Kinkhorst <thijs@debian.org> Description: libapache2-mod-auth-mellon - SAML 2.0 authentication module for Apache Changes: libapache2-mod-auth-mellon (0.12.0-2) unstable; urgency=high . * Backport upstream patches for security issues: - Fix a denial of service attack in the logout handler. - Fix a cross-site session transfer vulnerability [CVE-2017-6807]. Checksums-Sha1: d1837d35d9011939d3897afe27c27bb8dcbf5bea 1732 libapache2-mod-auth-mellon_0.12.0-2.dsc 9645eef2fe47b854476c5e03d8c7f3cec4a7d00e 5904 libapache2-mod-auth-mellon_0.12.0-2.debian.tar.xz 012a3360ed545da084a411a345a50d5313bfe687 163714 libapache2-mod-auth-mellon-dbgsym_0.12.0-2_amd64.deb 63345efabd8c08874c1813d2f07776fa38f64662 7868 libapache2-mod-auth-mellon_0.12.0-2_amd64.buildinfo f0b770cbd2b6bc2caf60df6ba70b0d3d11b75441 60144 libapache2-mod-auth-mellon_0.12.0-2_amd64.deb Checksums-Sha256: 762a7875ab541ec2ae3817435e3c13cb6173fd8176ebc7e03b7f05564d8fb819 1732 libapache2-mod-auth-mellon_0.12.0-2.dsc 6f3cfb55e88925af5d672f24b016115138fb7a14483ba536638b8e6bffcfa0c6 5904 libapache2-mod-auth-mellon_0.12.0-2.debian.tar.xz 634830f803257f1133ac15b064e05422d40c477db3f82392f136d4349b37656e 163714 libapache2-mod-auth-mellon-dbgsym_0.12.0-2_amd64.deb 7e836d48b931cc20fdd11ca81face59976390ba12584cd7a212a30dba3c399bc 7868 libapache2-mod-auth-mellon_0.12.0-2_amd64.buildinfo d7b0a2cdd683a84949394b246a9dd430f691a8d28a81e1474a331ad99415bfab 60144 libapache2-mod-auth-mellon_0.12.0-2_amd64.deb Files: a43a4b5ce6826fc5c2613e21e94dd2c8 1732 web extra libapache2-mod-auth-mellon_0.12.0-2.dsc 262cdb78617ef56ce83e9c11d1f20116 5904 web extra libapache2-mod-auth-mellon_0.12.0-2.debian.tar.xz bdd8447c6956bcdd25b3d567ab304af8 163714 debug extra libapache2-mod-auth-mellon-dbgsym_0.12.0-2_amd64.deb 4736f9e789261e8ed29b540a27cf6e92 7868 web extra libapache2-mod-auth-mellon_0.12.0-2_amd64.buildinfo 895fb9b319c99605091af7bd6bf42d36 60144 web extra libapache2-mod-auth-mellon_0.12.0-2_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJYxp/XAAoJEFb2GnlAHawEj0oH/iFmeZzVcbqgpD0NBVAQdMyO 0Nozl052o4YAwv2FrGVG5M4utwzHlrnvsH4stGbvjmeRtsu7KxXWRmvu/VXnMG3S Qw0UkRK7GvnjM7mpZhRWGLsG0kUYebe182UV75JoEGUVQAlHXZpXrfYwmpKfl5M7 9YND1njWI3Bzvtp4u44cJeOUFVYv3UY0FJ6ne24+9lf9KRAk7t0t5R+rU56bBzBK WboJzuru0QjQKLaXhNZ6UpIaAxTkEyBGaaoGpVAo79zTeV38jpMiWYzLF21lBUf0 +MzYMz/T8f3ICNSGMy+k+0o1JZOHkSPxAbLmCZrTJXnVvpseNyiprtTIT4mJoG8= =8DHy -----END PGP SIGNATURE-----