simplesamlphp - Debian Package Tracker

general

source: simplesamlphp (main)
version: 2.1.8-0.1
maintainer: Thijs Kinkhorst (DMD) (LowNMU)
arch: all
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 1.19.0-1
o-o-sec: 1.19.0-1+deb11u2
oldstable: 1.19.7-1+deb12u2
old-sec: 1.19.7-1+deb12u1
testing: 2.1.8-0.1
unstable: 2.1.8-0.1

versioned links

1.19.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.19.0-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.19.7-1+deb12u1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.19.7-1+deb12u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.1.8-0.1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

simplesamlphp (1 bugs: 0, 1, 0, 0)

action needed

A new upstream version is available: 2.5.2 high

A new upstream version 2.5.2 is available, you should consider packaging it.

Created: 2026-06-16 Last update: 2026-07-01 10:02

2 security issues in trixie high

There are 2 open security issues in trixie.

2 important issues:

CVE-2024-52596: SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0.
CVE-2024-52806: SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 4.6.14 and 5.0.0-alpha.18.

Created: 2024-12-02 Last update: 2024-12-03 21:32

RFS: A sponsor is needed to update this package. normal

A Debian contributor is looking for a sponsor to upload a package update. It might be the regular maintainer who does not have any upload right yet, or it might be someone who just wants to help for a bugfix or a new upstream version. In any case, if you have upload rights and care about this package and Debian in general, you should look into sponsoring this update. Please see bug number #1141188 for more information.

Created: 2026-07-01 Last update: 2026-07-01 00:30

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 2.2.6-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit 962a3e324017355d8bcd180123f5147a302b2a23
Merge: 68b71cf b668e39
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Tue Jun 30 18:00:11 2026 -0400

    Merge branch 'salvage-package' into 'debian/latest'
    
    Salvage package
    
    See merge request debian/simplesamlphp!12

commit b668e396a54cfb84800dc3ab586a9ea8d78057f5
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Tue Jun 30 17:49:13 2026 -0400

    Salvage package

commit 68b71cfd24a759dd1376f767fd372dec8cd5249d
Merge: 92939e7 9723aeb
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Tue Jun 30 17:41:36 2026 -0400

    Merge branch 'update-2.2.6' into 'debian/latest'
    
    Update to upstream 2.2.6
    
    See merge request debian/simplesamlphp!10

commit 92939e7053b540a0a214c9a56354f67193f4845a
Merge: b5a8308 9c60e9f
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Tue Jun 30 17:40:40 2026 -0400

    Merge branch 'nikolas-master-patch-60904' into 'debian/latest'
    
    debian/README.Debian: Add note about slim and full builds
    
    See merge request debian/simplesamlphp!11

commit 9c60e9f3001ad064dbe773d82e7b1b970f22ebf1
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Mon Jun 29 20:09:58 2026 -0400

    debian/README.Debian: Add note about slim and full builds

commit 9723aebd9a538f8f08823601ac8f93926487a892
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Mon Jun 29 15:58:11 2026 -0400

    New upstream release 2.2.6

commit 2ac2a818845a2ea5ebe880dc50375b5ed08ebcfe
Merge: b5a8308 ad49185
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Mon Jun 29 15:50:55 2026 -0400

    Update upstream source from tag 'upstream/2.2.6'
    
    Update to upstream version '2.2.6'
    with Debian dir 801f44c6931744746bee864ea3c92f60b6c112a0

commit ad491856d48b6e4b32074b33cb32d66344c38ef2
Author: Nikolas Nyby <nikolas@gnu.org>
Date:   Mon Jun 29 15:49:37 2026 -0400

    New upstream version 2.2.6

Created: 2026-06-30 Last update: 2026-07-01 00:00

lintian reports 60 warnings normal

Lintian reports 60 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2025-05-10 Last update: 2026-06-15 18:30

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2020-02-26 Last update: 2026-06-16 10:01

news

[rss feed]

[2026-06-20] simplesamlphp 2.1.8-0.1 MIGRATED to testing (Debian testing watch)
[2026-06-15] Accepted simplesamlphp 2.1.8-0.1 (source) into unstable (Nikolas Nyby) (signed by: Alexandre Detiste)
[2025-05-31] Accepted simplesamlphp 1.19.7-1+deb12u2 (source) into proposed-updates (Debian FTP Masters) (signed by: Tobias Frost)
[2025-05-10] Accepted simplesamlphp 1.19.7-2 (source) into unstable (Tobias Frost)
[2025-05-09] Accepted simplesamlphp 1.19.0-1+deb11u2 (source) into oldstable-security (Tobias Frost)
[2025-01-01] simplesamlphp REMOVED from testing (Debian testing watch)
[2024-12-03] Accepted simplesamlphp 1.19.7-1+deb12u1 (source all) into proposed-updates (Debian FTP Masters) (signed by: Thijs Kinkhorst)
[2024-12-02] Accepted simplesamlphp 1.19.7-1+deb12u1 (source all) into stable-security (Debian FTP Masters) (signed by: Thijs Kinkhorst)
[2024-12-01] Accepted simplesamlphp 1.19.0-1+deb11u1 (source all) into oldstable-security (Thijs Kinkhorst)
[2023-01-10] simplesamlphp 1.19.7-1 MIGRATED to testing (Debian testing watch)
[2023-01-04] Accepted simplesamlphp 1.19.7-1 (source) into unstable (Thijs Kinkhorst)
[2022-12-11] simplesamlphp 1.19.6-1 MIGRATED to testing (Debian testing watch)
[2022-12-06] Accepted simplesamlphp 1.19.6-1 (source) into unstable (Thijs Kinkhorst)
[2021-09-17] simplesamlphp 1.19.1-1.1 MIGRATED to testing (Debian testing watch)
[2021-09-11] Accepted simplesamlphp 1.19.1-1.1 (source) into unstable (Paul Gevers)
[2021-05-10] Accepted simplesamlphp 1.19.1-1 (source all) into unstable (Thijs Kinkhorst)
[2021-02-03] simplesamlphp 1.19.0-1 MIGRATED to testing (Debian testing watch)
[2021-01-29] Accepted simplesamlphp 1.19.0-1 (source) into unstable (Thijs Kinkhorst)
[2020-09-09] simplesamlphp 1.18.8-1 MIGRATED to testing (Debian testing watch)
[2020-09-04] Accepted simplesamlphp 1.18.8-1 (source) into unstable (Thijs Kinkhorst)
[2020-05-20] simplesamlphp 1.18.7-1 MIGRATED to testing (Debian testing watch)
[2020-05-15] Accepted simplesamlphp 1.18.7-1 (source) into unstable (Thijs Kinkhorst)
[2020-04-25] simplesamlphp 1.18.6-1 MIGRATED to testing (Debian testing watch)
[2020-04-20] Accepted simplesamlphp 1.18.6-1 (source) into unstable (Thijs Kinkhorst)
[2020-03-25] simplesamlphp 1.18.5-1 MIGRATED to testing (Debian testing watch)
[2020-03-20] Accepted simplesamlphp 1.18.5-1 (source) into unstable (Thijs Kinkhorst)
[2020-01-29] simplesamlphp 1.18.4-1 MIGRATED to testing (Debian testing watch)
[2020-01-24] Accepted simplesamlphp 1.18.4-1 (source) into unstable (Thijs Kinkhorst)
[2020-01-08] Accepted simplesamlphp 1.16.3-1+deb10u2 (source all) into proposed-updates->stable-new, proposed-updates (Thijs Kinkhorst)
[2019-12-02] simplesamlphp 1.18.1-1 MIGRATED to testing (Debian testing watch)

bugs [bug history graph]

all: 2
RC: 0
I&N: 2
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian (0, 60)
buildd: logs, reproducibility
popcon
browse source code
other distros
security tracker
l10n (-, 91)
debian patches

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.1.8-0.1