Upstream Security Vulnerability?

Jonathan Proulx jon at csail.mit.edu
Wed Mar 19 16:33:27 GMT 2025


Hi All,

I was notified of
https://shibboleth.net/community/advisories/secadv_20250313.txt by our
campus security team.

I don't see any related issue at
https://security-tracker.debian.org/tracker/source-package/shibboleth-sp
or
https://bugs.debian.org/cgi-bin/pkgreport.cgi?package=shibboleth-sp

Is this on your radar and if not should I open a bug? Or perhaps I'm looking in the wrong direction?

Thanks,
-Jon

-- 
Jonathan Proulx (he/him)
Sr. Technical Architect
The Infrastructure Group
MIT CSAIL



More information about the Pkg-shibboleth-devel mailing list