--- /dev/null
+xmltooling (1.3.3-2) unstable; urgency=low
+
+ * Force source format 1.0 for now since it makes backporting easier.
+ * Add ${misc:Depends} to all package dependencies.
+ * Update standards version to 3.8.4 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Thu, 13 May 2010 10:03:36 -0700
+
+xmltooling (1.3.3-1) unstable; urgency=low
+
+ * New upstream release.
+ - Allow the empty string in assignment to DateTime members.
+ - Allow configuration to not extract local credential names for
+ matching purposes.
+
+ -- Russ Allbery <rra@debian.org> Thu, 17 Dec 2009 18:29:08 -0800
+
+xmltooling (1.3.1-1) unstable; urgency=high
+
+ * Urgency set to high for security fix.
+ * New upstream release.
+ - SECURITY: Partial fix for improper handling of URLs that could be
+ abused for script injection and other cross-site scripting attacks.
+ The complete fix also requires newer opensaml2 and shibboleth-sp2
+ packages. (CVE-2009-3300)
+ - Add setter for KeyInfoResolver object.
+ - Fix extraction of cert info for UTF-8 handling changes.
+ - Fix passing of TransportOption configuration to cURL.
+ - Fix instability in reusing a DOM after signing it.
+ - Remove xmlns:xml namespace declaration when marshalling and
+ unmarshalling to avoid canonicalization bugs.
+ * Rename library package for upstream SONAME bump.
+ * Build-depend on libxml-security-c-dev 1.5 or later and make
+ libxmltooling-dev depend on libxml-security-c-dev 1.5 or later to
+ ensure that all builds are consistent. Although this package will
+ build with 1.4, the other packages built on xmltooling require 1.5.
+
+ -- Russ Allbery <rra@debian.org> Fri, 06 Nov 2009 11:30:41 -0800
+
+xmltooling (1.2.2-1) unstable; urgency=high
+
+ * Urgency set to high for security fix.
+ * New upstream release.
+ - SECURITY: Fix potential buffer overflows and reuses of freed objects
+ in error handling code paths with invalid XML or with malformed
+ URLs. See the upstream security advisory at
+ http://shibboleth.internet2.edu/secadv/secadv_20090826.txt
+ - Fix other validation issues with malformed objects.
+ - Fix for accessing the resolution context, which affects the ability
+ of callers to restrict keys based on use attributes.
+ - Fix encoding of backup metadata.
+ * Update debhelper compatibility level to V7.
+ - Use dh_prep instead of dh_clean -k.
+ * Update standards version to 3.8.3 (no changes required).
+
+ -- Russ Allbery <rra@debian.org> Thu, 27 Aug 2009 11:31:37 -0700
+
+xmltooling (1.2-1) unstable; urgency=low
+
+ * New upstream release.
+ - Stop dropping the namespace of qualified attributes that aren't
+ extensions.
+ - Expose multiple certificate revocation lists via the credential
+ API, allowing separate revocation lists for intermediate certs.
+ - Provide the hostname in artifact resolution errors.
+ - Sanity-check provided credentials for consistency.
+ * Rename library package for upstream SONAME bump.
+ * Build against Xerces-C 3.0.
+ * Update standards version to 3.8.2 (no changes required).
+ * Remove duplicate section setting for the library package.
+
+ -- Russ Allbery <rra@debian.org> Wed, 05 Aug 2009 15:45:06 -0700
+
+xmltooling (1.1-1) unstable; urgency=low
+
+ [ Russ Allbery ]
+ * New upstream bug-fix release.
+ * Bump SONAME of libxmltooling following upstream's versioning.
+ * Include <cstdio> in base.h since some of its macros use sprintf.
+ Fixes FTBFS for packages using xmltooling with GCC 4.4 that don't
+ already include cstdio. Thanks, Martin Michlmayr. (Closes: #505072)
+
+ [ Ferenc Wagner ]
+ * Fix watch file for upstream directory structure.
+
+ -- Russ Allbery <rra@debian.org> Tue, 17 Feb 2009 17:23:00 -0800
+
+xmltooling (1.0-2) unstable; urgency=low
+
+ [ Ferenc Wagner ]
+ * Add dependencies to libxmltooling-dev for the packages whose header
+ files are included by XMLTooling headers.
+ * Include NOTICE.txt in all packages.
+
+ [ Russ Allbery ]
+ * Explicitly link with -lpthread to work around Bug#468555 in libtool.
+ * Change package priorities to extra. Xerces-C is extra, so all of the
+ Shibboleth stack needs to be extra, and realistically it's somewhat of
+ an edge package in Debian.
+ * Add in copyright and license information for all of the other random
+ files in the tree, including all the Autoconf support files.
+ * Fix copyright file formatting to use the right syntax for Files.
+
+ -- Russ Allbery <rra@debian.org> Wed, 18 Jun 2008 20:18:21 -0700
+
+xmltooling (1.0-1) unstable; urgency=low
+
+ [ Ferenc Wagner ]
+ * Initial release (Closes: #480287)
+
+ -- Russ Allbery <rra@debian.org> Sat, 07 Jun 2008 13:00:13 -0700
--- /dev/null
+Source: xmltooling
+Section: libs
+Priority: extra
+Maintainer: Debian Shib Team <pkg-shibboleth-devel@lists.alioth.debian.org>
+Uploaders: Russ Allbery <rra@debian.org>, Ferenc Wagner <wferi@niif.hu>
+Build-Depends: debhelper (>= 7), autotools-dev, doxygen,
+ libcurl4-openssl-dev, liblog4cpp5-dev, libxerces-c-dev,
+ libxml-security-c-dev (>= 1.5)
+Standards-Version: 3.8.4
+Homepage: https://spaces.internet2.edu/display/OpenSAML/XMLTooling-C
+Vcs-Git: git://git.debian.org/git/pkg-shibboleth/xmltooling.git
+Vcs-Browser: http://git.debian.org/?p=pkg-shibboleth/xmltooling.git
+
+Package: libxmltooling4
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}
+Description: C++ XML parsing library with encryption support (runtime)
+ The XMLTooling library contains generic XML parsing and processing
+ classes based on the Xerces-C DOM. It adds more powerful facilities for
+ declaring element- and type-specific API and implementation classes, as
+ well as signing and encryption support.
+ .
+ This package contains the files necessary for running applications that
+ use the XMLTooling library.
+
+Package: libxmltooling-dev
+Section: libdevel
+Architecture: any
+Depends: ${misc:Depends}, libxmltooling4 (= ${binary:Version}),
+ libcurl4-openssl-dev, liblog4cpp5-dev, libxerces-c-dev,
+ libxml-security-c-dev (>= 1.5)
+Suggests: libxmltooling-doc (= ${source:Version})
+Description: C++ XML parsing library with encryption support (development)
+ The XMLTooling library contains generic XML parsing and processing
+ classes based on the Xerces-C DOM. It adds more powerful facilities
+ for declaring element- and type-specific API and implementation
+ classes to add value around the DOM, as well as signing and encryption
+ support.
+ .
+ This package contains the headers and other necessary files to build
+ applications or libraries that use or extend the XMLTooling library.
+
+Package: xmltooling-schemas
+Section: text
+Architecture: all
+Depends: ${misc:Depends}
+Description: XML schemas for XMLTooling
+ The XMLTooling library contains generic XML parsing and processing
+ classes based on the Xerces-C DOM. It adds more powerful facilities for
+ declaring element- and type-specific API and implementation classes, as
+ well as signing and encryption support.
+ .
+ This package contains the XML schema files used by the XMLTooling
+ library.
+
+Package: libxmltooling-doc
+Section: doc
+Architecture: all
+Depends: ${misc:Depends}
+Description: C++ XML parsing library with encryption support (API docs)
+ The XMLTooling library contains generic XML parsing and processing
+ classes based on the Xerces-C DOM. It adds more powerful facilities
+ for declaring element- and type-specific API and implementation
+ classes to add value around the DOM, as well as signing and encryption
+ support.
+ .
+ This package contains the XMLTooling library API documentation generated
+ by Doxygen.
--- /dev/null
+Format-Specification: http://wiki.debian.org/Proposals/CopyrightFormat
+Upstream-Author: Internet2
+Packaged-By: Ferenc Wágner <wferi@niif.hu>
+Packaged-Date: Mon, 28 Apr 2008 14:55:31 +0200
+Original-Source-Location:
+ http://shibboleth.internet2.edu/downloads/opensaml/cpp/2.0/
+
+Files: *
+Copyright: 2001-2009 Internet2
+License: Apache-2.0
+
+Files: */Makefile.in
+Copyright: 2001-2009 Internet2
+ 2004 Oren Ben-Kiki
+ 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005
+ Free Software Foundation, Inc.
+License: other
+ This Makefile.in is free software; the Free Software Foundation
+ gives unlimited permission to copy and/or distribute it,
+ with or without modifications, as long as this notice is preserved.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+ even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+ PARTICULAR PURPOSE.
+
+Files: ./aclocal.m4
+Copyright: 1996, 1997, 1998, 1999, 2000, 2001, 2002, 2003, 2004
+ Free Software Foundation, Inc.
+License: other
+ This file is free software; the Free Software Foundation
+ gives unlimited permission to copy and/or distribute it,
+ with or without modifications, as long as this notice is preserved.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+ even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+ PARTICULAR PURPOSE.
+
+Files: ./acx_pthread.m4
+Copyright: 2006 Steven G. Johnson <stevenj@alum.mit.edu>
+License: GPL-2+ | other
+ This program is free software; you can redistribute it and/or modify it
+ under the terms of the GNU General Public License as published by the
+ Free Software Foundation; either version 2 of the License, or (at your
+ option) any later version.
+ .
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
+ Public License for more details.
+ .
+ The full text of the GNU General Public License version 2 is available on
+ Debian systems in /usr/share/common-licenses/GPL-2.
+ .
+ As a special exception, the respective Autoconf Macro's copyright owner
+ gives unlimited permission to copy, distribute and modify the configure
+ scripts that are the output of Autoconf when processing the Macro. You
+ need not follow the terms of the GNU General Public License when using or
+ distributing such scripts, even though portions of the text of the Macro
+ appear in them. The GNU General Public License (GPL) does govern all
+ other use of the material that constitutes the Autoconf Macro.
+ .
+ This special exception to the GPL applies to versions of the Autoconf
+ Macro released by the Autoconf Macro Archive. When you make and
+ distribute a modified version of the Autoconf Macro, you may extend this
+ special exception to the GPL to apply to your modified version as well.
+
+Files: ./config.guess, ./config.sub, ./depcomp, ./libtool.m4, ./ltmain.sh
+ ./missing
+Copyright: 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999, 2000, 2001,
+ 2002, 2003, 2004, 2005 Free Software Foundation, Inc.
+License: GPL-2+ | other
+ This file is free software; you can redistribute it and/or modify it
+ under the terms of the GNU General Public License as published by the
+ Free Software Foundation; either version 2 of the License, or (at your
+ option) any later version.
+ .
+ This program is distributed in the hope that it will be useful, but
+ WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
+ Public License for more details.
+ .
+ The full text of the GNU General Public License version 2 is available on
+ Debian systems in /usr/share/common-licenses/GPL-2.
+ .
+ As a special exception to the GNU General Public License, if you
+ distribute this file as part of a program that contains a configuration
+ script generated by Autoconf, you may include it under the same
+ distribution terms that you use for the rest of that program.
+
+Files: ./configure
+Copyright: 2003 Free Software Foundation, Inc.
+License: other
+ This configure script is free software; the Free Software Foundation
+ gives unlimited permission to copy, distribute and modify it.
+
+Files: ./debian/*
+Copyright: 2008 Ferenc Wágner <wferi@niif.hu>
+ 2008, 2009 Russ Allbery <rra@debian.org>
+License: Expat
+
+Files: ./doxygen.{am,m4}
+Copyright: 2004 Oren Ben-Kiki
+License: other
+ This file is free software; the Free Software Foundation
+ gives unlimited permission to copy and/or distribute it,
+ with or without modifications, as long as this notice is preserved.
+ .
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY, to the extent permitted by law; without
+ even the implied warranty of MERCHANTABILITY or FITNESS FOR A
+ PARTICULAR PURPOSE.
+
+Files: ./install-sh
+Copyright: (C) 1994 X Consortium
+License: Expat
+
+Files: ./schemas/soap-envelope.xsd
+Copyright: 2001 Martin Gudgin, Developmentor
+ 2001 W3C (Massachusetts Institute of Technology, Institut National de
+ Recherche en Informatique et en Automatique, Keio University) All Rights
+ Reserved. http://www.w3.org/Consortium/Legal/
+License: W3C-Software
+
+Files: ./schemas/xml.xsd, ./schemas/xmldsig-core-schema.xsd
+Copyright: 2001 W3C (Massachusetts Institute of Technology, Institut
+ National de Recherche en Informatique et en Automatique, Keio University)
+ All Rights Reserved. http://www.w3.org/Consortium/Legal/
+License: W3C-Software
+
+Files: ./xmltooling/security/*X509CRL.h,
+ ./xmltooling/security/impl/*X509CRL.cpp, ./xmltooling/util/Curl*
+Copyright: 1999-2007 The Apache Software Foundation
+License: Apache-2.0
+
+License: Apache-2.0
+ Licensed under the Apache License, Version 2.0 (the "License"); you may
+ not use this file except in compliance with the License. You may obtain
+ a copy of the License at
+ .
+ http://www.apache.org/licenses/LICENSE-2.0
+ .
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+ License for the specific language governing permissions and limitations
+ under the License.
+ .
+ On Debian systems, the complete text of the Apache 2.0 license can be
+ found in the file /usr/share/common-licenses/Apache-2.0.
+
+License: Expat
+ Permission is hereby granted, free of charge, to any person obtaining
+ a copy of this software and associated documentation files (the
+ "Software"), to deal in the Software without restriction, including
+ without limitation the rights to use, copy, modify, merge, publish,
+ distribute, sublicense, and/or sell copies of the Software, and to
+ permit persons to whom the Software is furnished to do so, subject to
+ the following conditions:
+ .
+ The above copyright notice and this permission notice shall be
+ included in all copies or substantial portions of the Software.
+ .
+ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+ EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+ MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
+ IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+ CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT,
+ TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+License: W3C-Software
+ This W3C work (including software, documents, or other related items) is
+ being provided by the copyright holders under the following license. By
+ obtaining, using and/or copying this work, you (the licensee) agree that
+ you have read, understood, and will comply with the following terms and
+ conditions:
+ .
+ Permission to use, copy, modify, and distribute this software and its
+ documentation, with or without modification, for any purpose and without
+ fee or royalty is hereby granted, provided that you include the following
+ on ALL copies of the software and documentation or portions thereof,
+ including modifications, that you make:
+ .
+ 1. The full text of this NOTICE in a location viewable to users of the
+ redistributed or derivative work.
+ .
+ 2. Any pre-existing intellectual property disclaimers, notices, or terms
+ and conditions. If none exist, a short notice of the following form
+ (hypertext is preferred, text is permitted) should be used within the
+ body of any redistributed or derivative code: "Copyright ©
+ [$date-of-software] World Wide Web Consortium, (Massachusetts
+ Institute of Technology, Institut National de Recherche en
+ Informatique et en Automatique, Keio University). All Rights Reserved.
+ http://www.w3.org/Consortium/Legal/"
+ .
+ 3. Notice of any changes or modifications to the W3C files, including the
+ date changes were made. (We recommend you provide URIs to the location
+ from which the code is derived.)
+ .
+ THIS SOFTWARE AND DOCUMENTATION IS PROVIDED "AS IS," AND COPYRIGHT
+ HOLDERS MAKE NO REPRESENTATIONS OR WARRANTIES, EXPRESS OR IMPLIED,
+ INCLUDING BUT NOT LIMITED TO, WARRANTIES OF MERCHANTABILITY OR FITNESS
+ FOR ANY PARTICULAR PURPOSE OR THAT THE USE OF THE SOFTWARE OR
+ DOCUMENTATION WILL NOT INFRINGE ANY THIRD PARTY PATENTS, COPYRIGHTS,
+ TRADEMARKS OR OTHER RIGHTS.
+ .
+ COPYRIGHT HOLDERS WILL NOT BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL OR
+ CONSEQUENTIAL DAMAGES ARISING OUT OF ANY USE OF THE SOFTWARE OR
+ DOCUMENTATION.
+ .
+ The name and trademarks of copyright holders may NOT be used in
+ advertising or publicity pertaining to the software without specific,
+ written prior permission. Title to copyright in this software and any
+ associated documentation will at all times remain with copyright holders.
projects / shibboleth / xmltooling.git / commitdiff