Debian-LTS alert DLA-290-1 (xmltooling)

From:
    	     
 
Thorsten Alteholz <debian@alteholz.de> 
To:
    	     
 
debian-lts-announce@lists.debian.org 
Subject:
    	     
 
[SECURITY] [DLA 290-1] xmltooling security update 
Date:
    	     
 
Sun, 9 Aug 2015 22:44:09 +0200 (CEST)
Message-ID:
    	     
 
<alpine.DEB.2.02.1508092242310.22585@jupiter.server.alteholz.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : xmltooling
Version        : 1.3.3-2+deb6u1
CVE ID         : CVE-2015-0851
Debian Bug     : 793855

Shibboleth SP software crashes on well-formed but invalid XML

Another upload for opensaml2 is needed to really solve this
issue. This will be done shortly.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=s3Sp
-----END PGP SIGNATURE-----


-- 
To UNSUBSCRIBE, email to debian-lts-announce-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: https://lists.debian.org/alpine.DEB.2.02.1508092242310.22...