-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Jun 2018 18:55:01 +0200 Source: simplesamlphp Binary: simplesamlphp Architecture: source all Version: 1.13.1-2+deb8u2 Distribution: jessie-security Urgency: high Maintainer: Thijs Kinkhorst <thijs@debian.org> Changed-By: Thorsten Alteholz <debian@alteholz.de> Description: simplesamlphp - Authentication and federation application supporting several prot Changes: simplesamlphp (1.13.1-2+deb8u2) jessie-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2017-12872: Multiple timing side-channel issues (use the patch for CVE-2017-12868 too, just for completeness as Jessies php version normally contains hash_equals()) Checksums-Sha1: e6a2d5ae92d7e23595b48fd08732629ba09baeee 2107 simplesamlphp_1.13.1-2+deb8u2.dsc 23d83ed52be2d3ed94ddb31a711df465d42baa71 2303426 simplesamlphp_1.13.1.orig.tar.gz aec2e6f20e01787217cac31475b375262de86ae6 12208 simplesamlphp_1.13.1-2+deb8u2.debian.tar.xz 11b31a25907c47d9e5c7e764d0b40bd7432460ff 1560342 simplesamlphp_1.13.1-2+deb8u2_all.deb Checksums-Sha256: 9a97d9c19c27ec46106cd94656a3a720438717ca712a16762b76f683a63e0781 2107 simplesamlphp_1.13.1-2+deb8u2.dsc f8c22ada724b4628257f7415a397f9b0bb2ffd5d036380c5bff6830a33bb613f 2303426 simplesamlphp_1.13.1.orig.tar.gz 19b44fa7c245aa84abe918550c86ce37203de184ae51842f52cfd872da1775ac 12208 simplesamlphp_1.13.1-2+deb8u2.debian.tar.xz 1d572868308f503a874de232fa6ad238e189dfa30137d556d9046772f18d53ed 1560342 simplesamlphp_1.13.1-2+deb8u2_all.deb Files: ebfe60e96da75306583f6be383459705 2107 web extra simplesamlphp_1.13.1-2+deb8u2.dsc ceda3ee3b084d3bef3d25a99de9a8e80 2303426 web extra simplesamlphp_1.13.1.orig.tar.gz 19dbfc9a7ea7d552e5714b45c413f75c 12208 web extra simplesamlphp_1.13.1-2+deb8u2.debian.tar.xz 9cd7820277d9fa38c9934ce1d9c0d6a8 1560342 web extra simplesamlphp_1.13.1-2+deb8u2_all.deb -----BEGIN PGP SIGNATURE----- iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAls2kRpfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh bHRlaG9sei5kZQAKCRCW/KwNOHtYR27oD/9GqjhOoULsYYrIaIEJ9zCttgPc5aLX iE+XagsQxepOH6VltPxJgnnH4gOvdhz3IjPhf2z730q9AwI7yUOWRl66eLjC87o+ KBc3BYE+wf94TtxqJzk6Fgapms/ZOg7qT68AsznEg0jezGsxs52ausim+ZBWnAUT SbdJE8h7hcTAX1FsVIkZcEwVlWuPlHIiU13Ie4f/gmCrsyOnFPlBPl+BykGCKFDk PVKKv8x+lVvnSRbDCRpn7Do4jY4LmOiiRjUtMaMQcNSBmx8RJqIb3z+QRVoF+L6b 5GlH7glEEh+1snricFJCK2MF3rIYFz1u2oxPktb1ruJCxr8sV8AC5JssXHLikxPv lxf/gw7e1hw0OxrdcrPIa2RVew8BviN5eJ6lylXlfUjux4f//c2zmR2ny8COJCOb QKsM7r0LHD4PjtJrQxOA74KW3kxATZ312WdwOqpLS+TmoMCP+cD3QyDoePK4xOsY G3efBf0LmkqD8J/4MYUqyQ5T3jwmeY1OzUghvYxnew0fW5dLe88PcArVOU/i69yE BVA7GXjMfM8kuquvG5n2iFQ+iBe3TA8ipI/IqKc4DqgZqfpa/0CPWw6Y6zeJzcfr KnFyhxIkIfKIENtFDtKoxESVy7C1cHLXPH2VfkvyDLEoPcIj0JXGA5/ovqPq6CDQ WFNcxAXHjcBsng== =/zux -----END PGP SIGNATURE-----