xmltooling 1.3.1-1 source package in Ubuntu
Changelog
xmltooling (1.3.1-1) unstable; urgency=high * Urgency set to high for security fix. * New upstream release. - SECURITY: Partial fix for improper handling of URLs that could be abused for script injection and other cross-site scripting attacks. The complete fix also requires newer opensaml2 and shibboleth-sp2 packages. (CVE-2009-3300) - Add setter for KeyInfoResolver object. - Fix extraction of cert info for UTF-8 handling changes. - Fix passing of TransportOption configuration to cURL. - Fix instability in reusing a DOM after signing it. - Remove xmlns:xml namespace declaration when marshalling and unmarshalling to avoid canonicalization bugs. * Rename library package for upstream SONAME bump. * Build-depend on libxml-security-c-dev 1.5 or later and make libxmltooling-dev depend on libxml-security-c-dev 1.5 or later to ensure that all builds are consistent. Although this package will build with 1.4, the other packages built on xmltooling require 1.5. -- Ubuntu Archive Auto-Sync <email address hidden> Sat, 05 Dec 2009 21:32:44 +0000
Upload details
- Uploaded by:
- Ubuntu Archive Auto-Sync
- Uploaded to:
- Lucid
- Original maintainer:
- Debian Shib Team
- Architectures:
- any
- Section:
- libs
- Urgency:
- Very Urgent
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
xmltooling_1.3.1.orig.tar.gz | 566.7 KiB | be6a77a750ee629e3d85e8ffd60c66acfc5db31ee2c413aa804b9b661141b47f |
xmltooling_1.3.1-1.diff.gz | 6.7 KiB | 1c89b41661a52436588743599ea10bea9c0e083a998f28fac9422029ff587084 |
xmltooling_1.3.1-1.dsc | 1.4 KiB | 990b4a27ef49688ad2a70ec73d12963896947621c8f4b011ea6682afc3bc0498 |
Available diffs
- diff from 1.2.2-1 to 1.3.1-1 (210.8 KiB)
Binary packages built by this source
- libxmltooling-dev: No summary available for libxmltooling-dev in ubuntu lucid.
No description available for libxmltooling-dev in ubuntu lucid.
- libxmltooling-doc: No summary available for libxmltooling-doc in ubuntu lucid.
No description available for libxmltooling-doc in ubuntu lucid.
- libxmltooling4: No summary available for libxmltooling4 in ubuntu lucid.
No description available for libxmltooling4 in ubuntu lucid.
- xmltooling-schemas: No summary available for xmltooling-schemas in ubuntu lucid.
No description available for xmltooling-schemas in ubuntu lucid.