Please unblock opensaml2 2.0-2

Russ Allbery rra at
Fri Jan 23 04:54:48 UTC 2009

Hello folks,

Could you unblock opensaml2 2.0-2 for lenny?  The changelog is:

  * Include fix for
    (Metadata with EncryptionMethod elements fails to load)
  * Include fix for
    (SignatureMetadataFilter fails to validate signed EntityDescriptor)

The changes are from upstream and are extremely small (three added lines
of code).  They correct errors in the 2.0 code that prevent proper
handling of metadata with certain attributes.  The first bug in particular
can cause serious problems for Shibboleth users (the OpenSAML library is
in Debian to support the Shibboleth packages) who have metadata containing
those elements.

These bugs were only not reported as bugs against the Debian package
because they were found by one of the Shibboleth package developers.


Russ Allbery (rra at               <>

More information about the Pkg-shibboleth-devel mailing list