Begin forwarded message:

From: "Cantor, Scott via announce" <announce@shibboleth.net>

Subject: Shibboleth Identity Provider V5.1.2 and V4.3.3 now available

Date: 15 April 2024 at 19:36:20 CEST

To: "announce@shibboleth.net" <announce@shibboleth.net>

Cc: "Cantor, Scott" <cantor.2@osu.edu>

Reply-To: users@shibboleth.net

The Shibboleth Project has released patch updates to the V5 and V4 IdP software [1] to address a re-issued Spring advisory..

The original March advisory from us has been updated [2] and will be resent to the announce list shortly, and clarifies the IdP versions that address the issue (to our knowledge at least).

We will be taking steps in the future to address the specific dependency on Spring in this scenario in case they continue to discover more problems with it.

-- Scott

[1] http://shibboleth.net/downloads/identity-provider/
[2] https://shibboleth.net/community/advisories/secadv_20240320.txt

--
To unsubscribe from this list send an email to announce-unsubscribe@shibboleth.net