Security fixes for opensaml2 and xmltooling

[Russ Allbery]

"Scott Cantor" <cantor.2 at osu.edu> writes:

> Are you on the shib-security-alert at internet2.edu list? I think not, but
> I can add you. We use that for confidential pre-announcements to
> federation contacts and people deemed necessary to make sure there's
> advance warning about issues, impact, release schedules, etc. I
> circulate the draft advisories there, typically.

Ah, no, I'm not.

> Either you or whomever's appropriate from the Debian packaging effort
> could be added to make sure there's communication ahead of time.

I think I'm the right person.  That would be great, thank you!

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>