-
Committer:
Package Import Robot
-
Author(s):
Christian Kuersteiner
-
Date:
2013-06-12 16:37:06 UTC
-
Revision ID:
package-import@ubuntu.com-20130612163706-pyvvqvnfp1gdd9uz
Tags: 2.1.8debian-5ubuntu0.1
* SECURITY UPDATE: XML denial of service attack (LP: #1190179)
- debian/patches/02_CVE_2013_1812.patch: lib/openid/fetchers.rb,
lib/openid/yadis/xrds.rb: limit fetching file size & disable XML entity
expansion. Based on upstream patch.
- CVE-2013-1812