----- "Scott Cantor" <[email protected]> wrote:

> I can confirm that this would break in the manner described if you
> patch
> xmltooling but NOT opensaml with the related fix.
> 
> It sounds like the opensaml patch and the SP rebuild didn't make it in
> yet.
> My apologies if this wasn't clear to the packagers or if I caused a
> problem
> with the way the fix was implemented.

Ack, I'm sorry.  I didn't realize that, so yes, that will indeed be a
problem.

Unfortunately, I'm both sick at the moment and my main computer is
dead with hardware failure, so I can't easily pursue it at the moment.
If someone else could, that would be great.  I had proposed the needed
changes for opensaml2 for the next stable update, but didn't get a reply
from the bug filed against release.debian.org.  In this case, it may be
best to ask [email protected] whether this update should instead
be done via the security queue since having the xmltooling fix without
the opensaml2 fix breaks the package.



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to