Debian Linux Security Advisory 2284-1 - Juraj Somorovsky, Andreas Mayer, Meiko Jensen, Florian Kohlar, Marco Kampmann and Joerg Schwenk discovered that Shibboleth, a federated web single sign-on system is vulnerable to XML signature wrapping attacks.
e7e29a14f09078b7346c427e7da3140ccf2014154e01b80f3e6807390a769f89