FW: Shibboleth Identity Provider + OpenSAML Security Advisory [16 December 2022] - Saml-admins

17 Dec 2022

      Hej,

Här kommer en uppdatering från Shibboleth-konsortiet.

Pål

...
  -----Original Message-----
 From: announce &lt;announce-bounces(a)shibboleth.net&gt; On Behalf Of Cantor,
 Scott via announce
 Sent: Friday, December 16, 2022 11:29 PM
 To: announce(a)shibboleth.net
 Cc: Cantor, Scott
 Subject: Re: Shibboleth Identity Provider + OpenSAML Security Advisory [16
...
  December 2022]

 I have updated this morning's advisory [1] to reflect the fact that testing
...
  indicates the suggested workaround of updating the
xmlsec jar on older 4.x
...
  installs seems to work fine, and made the instructions
for that a bit clearer.
...

 Nothing's changed, just clarifying that the possible workaround is in fact
> sound. Thanks to CINECA for verifying that.
>
> -- Scott
>
> [1] https://shibboleth.net/community/advisories/secadv_20221216.txt