Security fixes for opensaml2 and xmltooling

[Russ Allbery]

Florian Weimer <fw at deneb.enyo.de> writes:

> This touches a function implicitly declared inline.  We have to
> rebuild all reverse build dependencies (direct and indirect) which
> instantiate MetadataCredentialCriteria objects because each such
> compilation unit has received a local copy of the function.

Oh, good catch.

> Could you check which packages in Debian instantiate
> MetadataCredentialCriteria objects?

Thankfully, there's only one reverse dependency of opensaml2, namely
shibboleth-sp2.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>