diff -Nru xml-security-c-1.7.3/debian/changelog xml-security-c-1.7.3/debian/changelog --- xml-security-c-1.7.3/debian/changelog 2015-11-29 19:00:43.000000000 +0000 +++ xml-security-c-1.7.3/debian/changelog 2019-03-07 18:03:19.000000000 +0000 @@ -1,3 +1,11 @@ +xml-security-c (1.7.3-1ubuntu0.1) xenial-security; urgency=medium + + * debian/patches/99-xsecsafebuffer.patch: Fix undefined behavior in + XSECSafeBuffer that affect ECDSA signature generation. This fix was + introduced in serie 2.x, but it was not backported to serie 1.7.x. + + -- Alejandro Claro Fri, 22 Feb 2019 16:30:42 +0100 + xml-security-c (1.7.3-1) unstable; urgency=medium * [df661d6] Check signature in watch file @@ -306,7 +314,7 @@ - Provide ability for calling application to define whether references are interlocking. - Complete implementation of XKMS message set - - Methods to allow loading of encrypted data without doing decrypt + - Methods to allow loading of encrypted data without doing decrypt and to process a decrypt/encrypt operation without replacing the original nodes. - Various bug fixes. diff -Nru xml-security-c-1.7.3/debian/control xml-security-c-1.7.3/debian/control --- xml-security-c-1.7.3/debian/control 2015-11-29 19:00:43.000000000 +0000 +++ xml-security-c-1.7.3/debian/control 2019-03-07 18:03:19.000000000 +0000 @@ -1,7 +1,8 @@ Source: xml-security-c Section: libs Priority: extra -Maintainer: Debian Shib Team +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: Debian Shib Team Uploaders: Russ Allbery , Ferenc Wágner , diff -Nru xml-security-c-1.7.3/debian/patches/99-xsecsafebuffer.patch xml-security-c-1.7.3/debian/patches/99-xsecsafebuffer.patch --- xml-security-c-1.7.3/debian/patches/99-xsecsafebuffer.patch 1970-01-01 00:00:00.000000000 +0000 +++ xml-security-c-1.7.3/debian/patches/99-xsecsafebuffer.patch 2019-03-07 18:03:19.000000000 +0000 @@ -0,0 +1,15 @@ +Description: Fix a length bug in concat method. +Origin: upstream, http://svn.apache.org/viewvc?view=revision&revision=1807280 +Index: xml-security-c-1.7.3/xsec/utils/XSECSafeBuffer.cpp +=================================================================== +--- xml-security-c-1.7.3.orig/xsec/utils/XSECSafeBuffer.cpp 2019-02-22 15:16:17.000000000 +0100 ++++ xml-security-c-1.7.3/xsec/utils/XSECSafeBuffer.cpp 2019-02-22 15:18:04.000000000 +0100 +@@ -639,7 +639,7 @@ + + assert (t != NULL); + +- len += XMLString::stringLen(t); ++ len += XMLString::stringLen(t) * size_XMLCh; + len += (xsecsize_t) (2 * size_XMLCh); + + checkAndExpand(len); diff -Nru xml-security-c-1.7.3/debian/patches/series xml-security-c-1.7.3/debian/patches/series --- xml-security-c-1.7.3/debian/patches/series 2015-11-29 19:00:43.000000000 +0000 +++ xml-security-c-1.7.3/debian/patches/series 2019-03-07 18:03:19.000000000 +0000 @@ -1,2 +1,3 @@ Add-xsec-prefix-to-utilities.patch Avoid-forward-incompatibility-warnings-from-Automake.patch +99-xsecsafebuffer.patch