webauth 3.6.2-2 source package in Ubuntu
Changelog
webauth (3.6.2-2) unstable; urgency=low * Set DESTDIR instead of PREFIX when installing the Perl modules. Perl 5.10.1 doesn't allow changing PREFIX at install time. Thanks, Niko Tyni. webauth (3.6.2-1) unstable; urgency=high * New upstream release. - CVE-2009-2945: When generating a redirect to test for cookie support, be sure not to include a password in the URL. Reject username/password logins via methods other than POST. - If the user submits the login form via POST without the test cookie, assume the browser supports cookies and don't probe. - New script (in /usr/share/doc/webauth-weblogin/weblogin-passcheck) to find passwords exposed by CVE-2009-2945. webauth (3.6.1-2) unstable; urgency=low * Do not install the libwebauth.la file. Libtool *.la files force other packages using Libtool to declare excessive library dependencies. * Update standards version to 3.8.3 (no changes required). webauth (3.6.1-1) unstable; urgency=low * New upstream release. - $BYPASS_CONFIRM now suppresses the confirm page after POST for browsers that support this. - $BYPASS_CONFIRM can be set to "id" to only bypass the confirmation page if the WAS is not requesting a proxy token (and hence may request delegated credentials). - New variables for the WebLogin confirmation page containing delegated credential details. - Better WebLogin cookie handling with confirmation bypass. * Remove -L and -l flags to dh_shlibdeps, which are no longer needed. * Remove full paths to a2dismod in the package prerm scripts. * Update standards version to 3.8.2. - Change sections of Apache modules. - Run test suite iff nocheck is not set in DEB_BUILD_OPTIONS. * Add Vcs-Git and Vcs-Browser source control fields. * Improve short description for libwebkdc-perl. * Update debian/copyright to include a copy of the more thorough new upstream LICENSE file. -- Ubuntu Archive Auto-Sync <email address hidden> Fri, 06 Nov 2009 10:40:02 +0000
Upload details
- Uploaded by:
- Ubuntu Archive Auto-Sync
- Uploaded to:
- Lucid
- Original maintainer:
- Russ Allbery
- Architectures:
- any
- Section:
- web
- Urgency:
- Very Urgent
See full publishing history Publishing
Series | Published | Component | Section |
---|
Downloads
File | Size | SHA-256 Checksum |
---|---|---|
webauth_3.6.2.orig.tar.gz | 655.2 KiB | e5a448abbe091e4e77113cfafa02257cfc05ead1767d17540e3628a272239b6c |
webauth_3.6.2-2.diff.gz | 17.1 KiB | 229b53dfcb57b17035aad00861b3dc54800c5e5bfb479d24a50836c0a7fdc5b3 |
webauth_3.6.2-2.dsc | 1.3 KiB | 15b8fc8f8a841018e5946561a93cd6679d95627e6a96b9509f6afc36dfdfcf0c |
Available diffs
- diff from 3.6.0-1build1 to 3.6.2-2 (1.1 MiB)
Binary packages built by this source
- libapache2-webauth: No summary available for libapache2-webauth in ubuntu maverick.
No description available for libapache2-webauth in ubuntu maverick.
- libapache2-webkdc: No summary available for libapache2-webkdc in ubuntu natty.
No description available for libapache2-webkdc in ubuntu natty.
- libwebauth-perl: No summary available for libwebauth-perl in ubuntu lucid.
No description available for libwebauth-perl in ubuntu lucid.
- libwebauth1: No summary available for libwebauth1 in ubuntu natty.
No description available for libwebauth1 in ubuntu natty.
- libwebauth1-dev: No summary available for libwebauth1-dev in ubuntu lucid.
No description available for libwebauth1-dev in ubuntu lucid.
- libwebkdc-perl: No summary available for libwebkdc-perl in ubuntu lucid.
No description available for libwebkdc-perl in ubuntu lucid.
- webauth-tests: No summary available for webauth-tests in ubuntu natty.
No description available for webauth-tests in ubuntu natty.
- webauth-utils: No summary available for webauth-utils in ubuntu natty.
No description available for webauth-utils in ubuntu natty.
- webauth-weblogin: No summary available for webauth-weblogin in ubuntu lucid.
No description available for webauth-weblogin in ubuntu lucid.