12:22 a.m.
Hej,
Här kommer en uppdatering från Shibboleth-konsortiet.
Pål
-----Original Message-----
From: announce <announce-bounces(a)shibboleth.net> On Behalf Of Cantor,
Scott via announce
Sent: Friday, December 16, 2022 11:29 PM
To: announce(a)shibboleth.net
Cc: Cantor, Scott
Subject: Re: Shibboleth Identity Provider + OpenSAML Security Advisory
[16
December 2022]
I have updated this morning's advisory [1] to reflect the fact that
testing
indicates the suggested workaround of updating the
xmlsec jar on older
4.x
installs seems to work fine, and made the instructions
for that a bit
clearer.
Nothing's changed, just clarifying that the possible workaround is in
fact
> sound. Thanks to CINECA for verifying that.
>
> -- Scott
>
> [1] https://shibboleth.net/community/advisories/secadv_20221216.txt