[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Please unblock opensaml2 2.0-2

Hello folks,

Could you unblock opensaml2 2.0-2 for lenny?  The changelog is:

  * Include fix for https://bugs.internet2.edu/jira/browse/CPPOST-7
    (Metadata with EncryptionMethod elements fails to load)
  * Include fix for https://bugs.internet2.edu/jira/browse/CPPOST-11
    (SignatureMetadataFilter fails to validate signed EntityDescriptor)

The changes are from upstream and are extremely small (three added lines
of code).  They correct errors in the 2.0 code that prevent proper
handling of metadata with certain attributes.  The first bug in particular
can cause serious problems for Shibboleth users (the OpenSAML library is
in Debian to support the Shibboleth packages) who have metadata containing
those elements.

These bugs were only not reported as bugs against the Debian package
because they were found by one of the Shibboleth package developers.


Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Reply to: