Security updates for opensaml and shibboleth-sp (etch)

[Florian Weimer]

* Russ Allbery:

> Russ Allbery <rra at debian.org> writes:
>
>> Attached are the updates for the Shibboleth 1.x packages that correspond
>> to the just-published DSA-1895 for xmltooling and the Shibboleth 2.x
>> environment.  In Shibboleth 2.x, xmltooling abstracts out a lot of
>> shared utility code, so the corresponding fixes for 1.x have to be
>> applied to both the opensaml library package and to the shibboleth-sp
>> package.  (1.x won't be in squeeze, only 2.x.)
>
> And here are the patches for etch.  Similarly seeking approval for upload
> to the oldstable-security queue.

Thanks, please upload them to security-master (both stable and oldstable).