Begin forwarded message:

From: "Cantor, Scott via announce" <announce@shibboleth.net>

Subject: Shibboleth Identity Provider for Windows service update, V4.3.1.1

Date: 19 April 2023 at 21:03:58 CEST

The Shibboleth Project has released a service update (V4.3.1.1) to the IdP on Windows installer to update Jetty to 10.0.15 in response to a pair of advisories announced yesterday. [1] Neither is all that critical but one of them involves a cookie parsing issue and was concerning enough to be cautious with.

The updated installer is in the usual place [2].

Of course, anybody operating Jetty themselves should consider updating but should be subscribed to their announce list for awareness anyway.

-- Scott

[1] https://www.eclipse.org//lists/jetty-announce/msg00176.html
[2] http://shibboleth.net/downloads/identity-provider/latest/



--
To unsubscribe from this list send an email to announce-unsubscribe@shibboleth.net