Salvatore Bonaccorso <car...@debian.org> writes: > Thanks, need to check why my mail for 881857 did not went trough > (since I retitled both with the CVE assignments).
I think you used the same bug number in both. Now, this is still ongoing: https://release.debian.org/transitions/html/auto-xerces-c.html The upstream fixes for this issue appeared as new patch level releases for XMLTooling (1.6.2), OpenSAML (2.6.1) and the SP (2.6.1). Shall I wait for the transition to finish before uploading them? -- Thanks, Feri
