Shibboleth Identity Provider 2.4.3 Released

Cantor, Scott cantor.2 at osu.edu
Tue Nov 4 09:02:58 EST 2014


The Shibboleth Project has released a patch update, V2.4.3, of the 
Identity Provider software, along with an update of the OpenSAML library, 
2.6.4.

This release primarily addresses the security advisory just announced 
addressing a denial of service vulnerability in the Xerces XML parser, and 
fixes a bug in the code around scripted attributes when Java 8 is used.

You can download the new release from the usual location [1] and we are in 
the process of updating documentation now.

-- Scott

[1] http://shibboleth.net/downloads/identity-provider/latest/




More information about the announce mailing list