Lenny fixes for opensaml2 and shibboleth-sp2

Ferenc Wagner wferi at niif.hu
Wed Dec 2 23:27:01 UTC 2009

Russ Allbery <rra at debian.org> writes:

> Ferenc Wagner <wferi at niif.hu> writes:
>> I'm backporting the fixes to #555608 (CVE-2009-3300) into Lenny.
> These changes look good to me on a basic examination, although I'm not
> horribly familiar with the code.  If you've had a chance to test the
> patched versions, could you go ahead and commit them?

The patched packages throw errors for the URLs kindly provided by Scott,
and otherwise seem to work normally.  I couldn't really stress them, but
I don't think that would have made any difference.  I'm not clear on the
soname change, though.

More information about the Pkg-shibboleth-devel mailing list