Comment 5 for bug 807416

Revision history for this message
Russ Allbery (rra-debian) wrote :

No update or recompile of the shibboleth-sp2 package is required for either the xml-security-c or the opensaml2 security advisories so far as I know. Only upgrading the libraries to patched versions and then restarting shibd and Apache is required, I think. The changes didn't affect the external API of the libraries, only the internal shared library code.