[cpp-sp] 03/03: Include a description of the security issue in the changelog

[Scott Cantor]

This is an automated email from the git hooks/post-receive script.

scantor pushed a commit to annotated tag debian/2.0.dfsg1-4+lenny2
in repository cpp-sp.

View the commit online:
http://git.shibboleth.net/view/?p=cpp-sp.git;a=commit;h=dce164a814894faa10231b05c5ef40326aea3a0e

commit dce164a814894faa10231b05c5ef40326aea3a0e
Author: Russ Allbery <rra at debian.org>
AuthorDate: Thu Dec 3 16:31:56 2009 -0800

    Include a description of the security issue in the changelog
---
 debian/changelog | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/debian/changelog b/debian/changelog
index 350614b..c6a8516 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,6 +1,9 @@
 shibboleth-sp2 (2.0.dfsg1-4+lenny2) stable-security; urgency=high
 
-  * SECURITY: Backport fix for CVE-2009-3300
+  * SECURITY: Partial fix for improper handling of URLs that could be
+    abused for script injection and other cross-site scripting attacks.
+    The complete fix also requires a newer opensaml2 package.
+    (Closes: #555608, CVE-2009-3300)
 
  -- Ferenc Wagner <wferi at niif.hu>  Tue, 24 Nov 2009 16:02:12 +0100
 

-- 
To stop receiving notification emails like this one, please contact
the administrator of this repository.