Accepted xmltooling 1.4.2-5+deb7u2 (source amd64 all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 14 Jan 2018 20:41:01 +0100
Source: xmltooling
Binary: libxmltooling5 libxmltooling-dev xmltooling-schemas libxmltooling-doc
Architecture: source amd64 all
Version: 1.4.2-5+deb7u2
Distribution: wheezy-security
Urgency: high
Maintainer: Debian Shib Team <pkg-shibboleth-devel@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
libxmltooling-dev - C++ XML parsing library with encryption support (development)
libxmltooling-doc - C++ XML parsing library with encryption support (API docs)
libxmltooling5 - C++ XML parsing library with encryption support (runtime)
xmltooling-schemas - XML schemas for XMLTooling
Changes:
xmltooling (1.4.2-5+deb7u2) wheezy-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2018-0486:
Philip Huppert discovered the Shibboleth service provider is vulnerable to
impersonation attacks and information disclosure due to mishandling of DTDs
in the XMLTooling XML parsing library. For additional details please refer
to the upstream advisory at
https://shibboleth.net/community/advisories/secadv_20180112.txt
Checksums-Sha1:
1e5364e74e449f9706721d0c0bd376b499ac4597 2497 xmltooling_1.4.2-5+deb7u2.dsc
f0b9ca8b4b6b4033366e563338ef273b14bcc840 10709 xmltooling_1.4.2-5+deb7u2.debian.tar.gz
9c6e716306cb584413c82d4914a9fa78e3a850e9 885896 libxmltooling5_1.4.2-5+deb7u2_amd64.deb
f4da11f67114cd339843f2725533a793ea6dc544 83066 libxmltooling-dev_1.4.2-5+deb7u2_amd64.deb
95b1213bc44b82b6ac9c379d0c44856c98764a1e 16342 xmltooling-schemas_1.4.2-5+deb7u2_all.deb
5510721dd29167f23f9fff128b27f9f0d85d0f8c 6126858 libxmltooling-doc_1.4.2-5+deb7u2_all.deb
Checksums-Sha256:
6eb00ef161eea84323d3f73e47dd2ba9c1102a17cb21959db314a4f7ccf737d3 2497 xmltooling_1.4.2-5+deb7u2.dsc
46aecc1871ae232ee174c9a3266c6ab6a9d9deab2a5f487a42ffd4a8436c8484 10709 xmltooling_1.4.2-5+deb7u2.debian.tar.gz
3b232652b7b48519b358b7de294cd5bc9d771d15ea53b176adf4f82fe1f6037f 885896 libxmltooling5_1.4.2-5+deb7u2_amd64.deb
9454168b3c55121f289dbf3f25a33e6947baf796dbfc021060eeb8274a1b1980 83066 libxmltooling-dev_1.4.2-5+deb7u2_amd64.deb
807564628e0fed2d58256a952adfc1d6bfc8e0e8763ceb90a073cf7109bb00f8 16342 xmltooling-schemas_1.4.2-5+deb7u2_all.deb
d9c11b474cabc8ba760e24a8f6625cf91f463695f9d640c3935b0940e1f301b0 6126858 libxmltooling-doc_1.4.2-5+deb7u2_all.deb
Files:
5597911df295e45bd190b55e80eed228 2497 libs extra xmltooling_1.4.2-5+deb7u2.dsc
778bfa4278825e4f9ac5b995d5d8cb3f 10709 libs extra xmltooling_1.4.2-5+deb7u2.debian.tar.gz
59cf0217afe158ae874d5eb6ed29b9d0 885896 libs extra libxmltooling5_1.4.2-5+deb7u2_amd64.deb
7b90bbd602d73a2713e9a101d1e717b7 83066 libdevel extra libxmltooling-dev_1.4.2-5+deb7u2_amd64.deb
baa2daa4471869d5c5302104d912e1e3 16342 text extra xmltooling-schemas_1.4.2-5+deb7u2_all.deb
e13c8514b2bc83c5e1a7566b3049eab0 6126858 doc extra libxmltooling-doc_1.4.2-5+deb7u2_all.deb
-----BEGIN PGP SIGNATURE-----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=BczM
-----END PGP SIGNATURE-----