Package: liblasso3
Version: 2.5.0-5+b1
Severity: important

Dear Maintainer,

I'm using libapache2-mod-auth-mellon for providing an SAML SP which depends on 
lasso. I need to use
SHA256 based signatures but those are generated wrongly because of a bug in 
this version (upstream bug https://dev.entrouvert.org/issues/10019).
Version 2.5.1 fixes the problem, therefore I suggest updating to this version 
or at least include the patch which fixes the problem.

Thanks!

-- System Information:
Debian Release: 9.6
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-8-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=locale: Cannot set 
LC_ALL to default locale: No such file or directory
UTF-8), LANGUAGE=en_US:en (charmap=locale: Cannot set LC_ALL to default locale: 
No such file or directory
UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages liblasso3 depends on:
ii  libc6               2.24-11+deb9u3
ii  libglib2.0-0        2.50.3-2
ii  libssl1.0.2         1.0.2q-1~deb9u1
ii  libxml2             2.9.4+dfsg1-2.2+deb9u2
ii  libxmlsec1          1.2.23-0.1
ii  libxmlsec1-openssl  1.2.23-0.1
ii  libxslt1.1          1.1.29-2.1
ii  zlib1g              1:1.2.8.dfsg-5

liblasso3 recommends no packages.

liblasso3 suggests no packages.

-- debconf information excluded

-- debsums errors found:
perl: warning: Setting locale failed.
perl: warning: Please check that your locale settings:
        LANGUAGE = "en_US:en",
        LC_ALL = (unset),
        LC_TIME = "de_AT.UTF-8",
        LC_MONETARY = "de_AT.UTF-8",
        LC_ADDRESS = "de_AT.UTF-8",
        LC_TELEPHONE = "de_AT.UTF-8",
        LC_NAME = "de_AT.UTF-8",
        LC_MEASUREMENT = "de_AT.UTF-8",
        LC_IDENTIFICATION = "de_AT.UTF-8",
        LC_NUMERIC = "de_AT.UTF-8",
        LC_PAPER = "de_AT.UTF-8",
        LANG = "en_US.UTF-8"
    are supported and installed on your system.
perl: warning: Falling back to a fallback locale ("en_US.UTF-8").

Reply via email to