Lenny fixes for opensaml2 and shibboleth-sp2
wferi at niif.hu
Wed Dec 2 23:27:01 UTC 2009
Russ Allbery <rra at debian.org> writes:
> Ferenc Wagner <wferi at niif.hu> writes:
>> I'm backporting the fixes to #555608 (CVE-2009-3300) into Lenny.
> These changes look good to me on a basic examination, although I'm not
> horribly familiar with the code. If you've had a chance to test the
> patched versions, could you go ahead and commit them?
The patched packages throw errors for the URLs kindly provided by Scott,
and otherwise seem to work normally. I couldn't really stress them, but
I don't think that would have made any difference. I'm not clear on the
soname change, though.
More information about the Pkg-shibboleth-devel