[SCM] Debian packaging for the 2.0 Apache Shibboleth SP branch, debian, updated. upstream/2.2.1+dfsg-129-g86b8a8e

Russ Allbery rra at debian.org
Tue Nov 10 23:43:00 UTC 2009


The following commit has been merged in the debian branch:
commit b80e914103099b04560c79351f830b33dc60d106
Author: Russ Allbery <rra at debian.org>
Date:   Tue Nov 10 14:57:04 2009 -0800

    Initial changelog for 2.3

diff --git a/debian/changelog b/debian/changelog
index 04e1ea7..fb94486 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,8 +1,16 @@
-shibboleth-sp2 (2.2.1+dfsg-3) unstable; urgency=low
+shibboleth-sp2 (2.3+dfsg-1) UNRELEASED; urgency=low
 
+  [ Russ Allbery ]
+  * New upstream release.
+    - SECURITY: Partial fix for improper handling of URLs that could be
+      abused for script injection and other cross-site scripting attacks.
+      The complete fix also requires newer xmltooling and opensaml2
+      packages.  (Closes: #555608, CVE-2009-3300)
+
+  [ Ferenc Wagner ]
   * Run shibd as non-root.
 
- -- Ferenc Wagner <wferi at niif.hu>  Fri, 18 Sep 2009 17:52:07 +0200
+ -- Russ Allbery <rra at debian.org>  Tue, 10 Nov 2009 14:55:56 -0800
 
 shibboleth-sp2 (2.2.1+dfsg-2) unstable; urgency=low
 

-- 
Debian packaging for the 2.0 Apache Shibboleth SP



More information about the Pkg-shibboleth-devel mailing list