Tighten build and package dependencies

* Tighten build and package dependencies on xmltooling and opensaml2 to
  require the versions with the security fix.

diff --git a/debian/changelog b/debian/changelog
index cb417dc..b2100c2 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -18,6 +18,8 @@ shibboleth-sp2 (2.3+dfsg-1) UNRELEASED; urgency=low
     - Use an ID rather than a whole doc reference for generated metadata.
     - Fix spelling of scopeDelimiter in the configuration parser, making
       the code and documentation match the schema.
+  * Tighten build and package dependencies on xmltooling and opensaml2 to
+    require the versions with the security fix.
   * Fix watch file for the new version mangling.
 
   [ Ferenc Wagner ]

diff --git a/debian/control b/debian/control
index 1ec8cf9..9a48a7d 100644 (file)
--- a/debian/control
+++ b/debian/control
@@ -5,8 +5,8 @@ Maintainer: Debian Shib Team <pkg-shibboleth-devel@lists.alioth.debian.org>
 Uploaders: Russ Allbery <rra@debian.org>, Ferenc Wagner <wferi@niif.hu>
 Build-Depends: debhelper (>= 5), autotools-dev, autoconf, automake,
  libtool, apache2-threaded-dev, doxygen, liblog4cpp5-dev,
- libsaml2-dev (>= 2.2), libssl-dev, libxerces-c-dev,
- libxml-security-c-dev (>= 1.5), libxmltooling-dev (>= 1.2),
+ libsaml2-dev (>= 2.3), libssl-dev, libxerces-c-dev,
+ libxml-security-c-dev (>= 1.5), libxmltooling-dev (>= 1.3),
  opensaml2-schemas, unixodbc-dev, xmltooling-schemas
 Standards-Version: 3.8.3
 Homepage: http://shibboleth.internet2.edu/
@@ -34,8 +34,8 @@ Description: Federated web single sign-on system (Apache module)
 Package: libshibsp3
 Section: libs
 Architecture: any
-Depends: ${shlibs:Depends}, opensaml2-schemas (>= 2.2),
- shibboleth-sp2-schemas (>= 2.2), xmltooling-schemas (>= 1.2)
+Depends: ${shlibs:Depends}, opensaml2-schemas (>= 2.3),
+ shibboleth-sp2-schemas (>= 2.3), xmltooling-schemas (>= 1.3)
 Description: Federated web single sign-on system (runtime)
  The Shibboleth System is a standards based software package for web
  single sign-on across or within organizational boundaries.  It supports
@@ -49,8 +49,8 @@ Description: Federated web single sign-on system (runtime)
 Package: libshibsp-dev
 Section: libdevel
 Architecture: any
-Depends: libshibsp3 (= ${binary:Version}), libsaml2-dev, libxerces-c-dev,
- libxmltooling-dev
+Depends: libshibsp3 (= ${binary:Version}), libsaml2-dev (>= 2.3),
+ libxerces-c-dev, libxmltooling-dev (>= 1.3)
 Suggests: libshib2-doc (= ${source:Version})
 Description: Federated web single sign-on system (development)
  The Shibboleth System is a standards based software package for web