[Bug 1480765] Re: Shibboleth Service Provider Security Advisory [21 July 2015] for ShibSP < 2.5.5

2015-10-02 Thread Launchpad Bug Tracker
[Expired for shibboleth-sp2 (Ubuntu) because there has been no activity for 60 days.] ** Changed in: shibboleth-sp2 (Ubuntu) Status: Incomplete => Expired -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1480765] Re: Shibboleth Service Provider Security Advisory [21 July 2015] for ShibSP 2.5.5

2015-08-03 Thread Seth Arnold
If you're able to work on this, please note that there is an older issue still open that probably needs to be addressed, too: http://people.canonical.com/~ubuntu-security/cve/2013/CVE-2013-6440.html Thanks ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2013-6440 -- You

[Bug 1480765] Re: Shibboleth Service Provider Security Advisory [21 July 2015] for ShibSP 2.5.5

2015-08-03 Thread Seth Arnold
Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest coordinating with upstream and posting a debdiff for this issue. When a debdiff is