Security patches for shibboleth-sp2 and opensaml2 for lenny

Russ Allbery rra at
Sun Dec 6 21:22:55 UTC 2009

Moritz Muehlenhoff <jmm at> writes:
> On Thu, Dec 03, 2009 at 06:04:26PM -0800, Russ Allbery wrote:

>> Here are updated patches for CVE-2009-3300 for shibboleth-sp2 and
>> opensaml2 for Debian lenny.  These are the same as the patches sent
>> earlier by Ferenc Wagner except that they also include libtool and
>> shlibs version bumps for the libshibsp1 library (but not an SONAME
>> change) due to the new exported symbols.
>> Please let me know if I have permission to upload these to the security
>> queue.  Thank you!

> Please upload.

Uploaded, thanks.

Russ Allbery (rra at               <>

More information about the Pkg-shibboleth-devel mailing list