[ubuntu/plucky-proposed] opensaml 3.3.0-2ubuntu1 (Accepted)

[Tom Andrew]

opensaml (3.3.0-2ubuntu1) plucky; urgency=medium

  * SECURITY UPDATE: CPPOST-126 - Simple signature verification fails to
    detect parameter smuggling (LP: #2103420)
    - debian/patches/lp2103420-forging.patch: address parameter smuggling.
      Patch from upstream commit 22a610b322e2178abd03e97cdbc8fb50b45efaee,
      thanks to Scott Cantor
    - No CVE number

Date: Tue, 18 Mar 2025 16:24:50 +0000
Changed-By: Tom Andrew <tom.andrew at york.ac.uk>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/opensaml/3.3.0-2ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 18 Mar 2025 16:24:50 +0000
Source: opensaml
Built-For-Profiles: noudeb
Architecture: source
Version: 3.3.0-2ubuntu1
Distribution: plucky
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Tom Andrew <tom.andrew at york.ac.uk>
Launchpad-Bugs-Fixed: 2103420
Changes:
 opensaml (3.3.0-2ubuntu1) plucky; urgency=medium
 .
   * SECURITY UPDATE: CPPOST-126 - Simple signature verification fails to
     detect parameter smuggling (LP: #2103420)
     - debian/patches/lp2103420-forging.patch: address parameter smuggling.
       Patch from upstream commit 22a610b322e2178abd03e97cdbc8fb50b45efaee,
       thanks to Scott Cantor
     - No CVE number
Checksums-Sha1:
 9c3153ac4fd189d83fc13ec07c91ad8918704321 2805 opensaml_3.3.0-2ubuntu1.dsc
 c604b9fa5f831ad7787e9522831cdaaa4cd1f821 22244 opensaml_3.3.0-2ubuntu1.debian.tar.xz
 a5ae40c435f79c9f1b567afcb4bf21d944ce0c0d 8942 opensaml_3.3.0-2ubuntu1_source.buildinfo
Checksums-Sha256:
 67ce7f81c47028230ef86fe24131457d6ce8593ee520186df0670119d71fcb93 2805 opensaml_3.3.0-2ubuntu1.dsc
 57934ee0e1bbe339f0d250997b022382239e2b8d570a79b5b4c331773e82984d 22244 opensaml_3.3.0-2ubuntu1.debian.tar.xz
 c2b116e312c16d676b1a78fdd37b8bfee493e977a30d6c7bfdea37ffc42e83e1 8942 opensaml_3.3.0-2ubuntu1_source.buildinfo
Files:
 320b0098ecf237a894284f1bfb22026b 2805 libs optional opensaml_3.3.0-2ubuntu1.dsc
 70642442e53e583d5f995d87c832de02 22244 libs optional opensaml_3.3.0-2ubuntu1.debian.tar.xz
 5d46a97aece21b8cbc57b4720edd7065 8942 libs optional opensaml_3.3.0-2ubuntu1_source.buildinfo
Original-Maintainer: Debian Shib Team <pkg-shibboleth-devel at alioth-lists.debian.net>