Begin forwarded message:

From: "Cantor, Scott via users" <users@shibboleth.net>

Subject: IdP advisory forthcoming

Date: 14 December 2022 at 02:13:07 CET

To: "users@shibboleth.net" <users@shibboleth.net>

Cc: "Cantor, Scott" <cantor.2@osu.edu>

Reply-To: Shib Users <users@shibboleth.net>

An IdP advisory will be coming soon, possibly by the end of this week. It's a bit unusual and isn't accompanying a patch. It involves risks to non-current IdP versions (i.e. not 4.2)  primarily when Java isn't patched.

The immediate risk is (extremely) critical, but is much lower if Java isn't out of date.

-- Scott


--
For Consortium Member technical support, see https://shibboleth.atlassian.net/wiki/x/ZYEpPw
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net