diff -Nru xml-security-c-1.7.2/debian/changelog xml-security-c-1.7.2/debian/changelog --- xml-security-c-1.7.2/debian/changelog 2013-07-11 08:03:26.000000000 +0200 +++ xml-security-c-1.7.2/debian/changelog 2019-02-22 16:30:55.000000000 +0100 @@ -1,3 +1,12 @@ +xml-security-c (1.7.2-2ubuntu3) UNRELEASED; urgency=medium + + * debian/patches/99-xsecsafebuffer.patch: Fix undefined behavior in + XSECSafeBuffer that affect ECDSA signature generation. This fix was + introduced in serie 2.x, but it was not backported to serie 1.7.x. + * + + -- Alejandro Claro Fri, 22 Feb 2019 16:30:42 +0100 + xml-security-c (1.7.2-2) unstable; urgency=low * Upload to unstable. @@ -260,7 +269,7 @@ - Provide ability for calling application to define whether references are interlocking. - Complete implementation of XKMS message set - - Methods to allow loading of encrypted data without doing decrypt + - Methods to allow loading of encrypted data without doing decrypt and to process a decrypt/encrypt operation without replacing the original nodes. - Various bug fixes. diff -Nru xml-security-c-1.7.2/debian/control xml-security-c-1.7.2/debian/control --- xml-security-c-1.7.2/debian/control 2013-07-11 08:03:26.000000000 +0200 +++ xml-security-c-1.7.2/debian/control 2019-02-22 16:41:00.000000000 +0100 @@ -1,11 +1,12 @@ Source: xml-security-c Section: libs Priority: extra -Maintainer: Debian Shib Team +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Debian Shib Team Uploaders: Russ Allbery Build-Depends: debhelper (>= 9), dh-autoreconf, libssl-dev (>= 1.0.1), libxerces-c-dev, pkg-config -Standards-Version: 3.9.4 +Standards-Version: 3.9.5 Homepage: http://santuario.apache.org/cindex.html Vcs-Git: git://anonscm.debian.org/pkg-shibboleth/xml-security-c.git Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-shibboleth/xml-security-c.git diff -Nru xml-security-c-1.7.2/debian/patches/99-xsecsafebuffer.patch xml-security-c-1.7.2/debian/patches/99-xsecsafebuffer.patch --- xml-security-c-1.7.2/debian/patches/99-xsecsafebuffer.patch 1970-01-01 01:00:00.000000000 +0100 +++ xml-security-c-1.7.2/debian/patches/99-xsecsafebuffer.patch 2019-02-22 15:24:54.000000000 +0100 @@ -0,0 +1,16 @@ +## Description: add some description +## Origin/Author: add some origin or author +## Bug: bug URL +Index: xml-security-c-1.7.2/xsec/utils/XSECSafeBuffer.cpp +=================================================================== +--- xml-security-c-1.7.2.orig/xsec/utils/XSECSafeBuffer.cpp 2019-02-22 15:16:17.000000000 +0100 ++++ xml-security-c-1.7.2/xsec/utils/XSECSafeBuffer.cpp 2019-02-22 15:18:04.000000000 +0100 +@@ -639,7 +639,7 @@ + + assert (t != NULL); + +- len += XMLString::stringLen(t); ++ len += XMLString::stringLen(t) * size_XMLCh; + len += (xsecsize_t) (2 * size_XMLCh); + + checkAndExpand(len); diff -Nru xml-security-c-1.7.2/debian/patches/series xml-security-c-1.7.2/debian/patches/series --- xml-security-c-1.7.2/debian/patches/series 2013-07-11 08:03:42.000000000 +0200 +++ xml-security-c-1.7.2/debian/patches/series 2019-02-22 15:15:54.000000000 +0100 @@ -1 +1,2 @@ debian-changes +99-xsecsafebuffer.patch