xml-security-c security uploads

Russ Allbery rra at debian.org
Fri Jul 24 22:01:36 UTC 2009


"Scott Cantor" <cantor.2 at osu.edu> writes:

> If you haven't done it already, there's another small patch worth
> backporting that improves interop (beyond even Shibboleth). No big deal
> either way, but if you want it...
>
> http://svn.apache.org/viewvc/xml/security/trunk/c/src/dsig/DSIGKeyInfoList.c
> pp?r1=566299&r2=697216

I'm guessing this won't pass the strict requirements for security updates,
so I think the best way to deal with this is to encourage people to use
the 1.5.1 backports that we'll prepare as part of packaging Shibboleth
2.2.

Thank you for the pointer!

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>



More information about the Pkg-shibboleth-devel mailing list