Please unblock opensaml2 2.0-2

Russ Allbery rra at debian.org
Fri Jan 23 04:54:48 UTC 2009


Hello folks,

Could you unblock opensaml2 2.0-2 for lenny?  The changelog is:

  * Include fix for https://bugs.internet2.edu/jira/browse/CPPOST-7
    (Metadata with EncryptionMethod elements fails to load)
  * Include fix for https://bugs.internet2.edu/jira/browse/CPPOST-11
    (SignatureMetadataFilter fails to validate signed EntityDescriptor)

The changes are from upstream and are extremely small (three added lines
of code).  They correct errors in the 2.0 code that prevent proper
handling of metadata with certain attributes.  The first bug in particular
can cause serious problems for Shibboleth users (the OpenSAML library is
in Debian to support the Shibboleth packages) who have metadata containing
those elements.

These bugs were only not reported as bugs against the Debian package
because they were found by one of the Shibboleth package developers.

Thanks!

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>



More information about the Pkg-shibboleth-devel mailing list