Bug#759470: libopensaml2-java: CVE-2014-3603

[tony mancill]

On 08/27/2014 04:07 AM, Moritz Muehlenhoff wrote:
> Package: libopensaml2-java
> Severity: grave
> Tags: security
> Justification: user security hole
> 
> Please see http://shibboleth.net/community/advisories/secadv_20140813.txt

Hi Moritz - thank you for the bug report.

I have prepared an upload of 2.6.2, which is the recommended version at
the shibboleth.net site.  I'll coordinate an upload once I talk to
Matthew Vernon.

Cheers,
tony


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20140827/8c238bcb/attachment.sig>