Lenny fixes for opensaml2 and shibboleth-sp2

[Russ Allbery]

Ferenc Wagner <wferi at niif.hu> writes:

> Security team,

> I'm backporting the fixes to #555608 (CVE-2009-3300) into Lenny.

These changes look good to me on a basic examination, although I'm not
horribly familiar with the code.  If you've had a chance to test the
patched versions, could you go ahead and commit them?  I'll ping the
security team about them again if we don't hear more from them in the next
few days.

Thank you so much for working on this!

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>