Shibboleth Identity Provider 2.4.4, OpenSAML-J 2.6.5 Released

Brent Putman putmanb at georgetown.edu
Wed Feb 25 18:07:32 EST 2015


The Shibboleth Project has released a patch update, V2.4.4, of the 
Identity Provider software, along with an update of the OpenSAML library, 
2.6.5.

This release primarily addresses the security advisory just announced 
concerning a flaw in PKIX trust engine name handling.

Also of note are provisional fixes for a long-standing issue concerning
hangs with remote HTTP metadata retrieval and/or service reloading of
remote config files via HTTP. [1]

A complete list of issues fixed is available in Jira for the IdP [2]
and OpenSAML [3].

You can download the new release from the usual location [4].

-- Brent


[1] https://issues.shibboleth.net/jira/browse/SIDP-624
[1] https://issues.shibboleth.net/jira/issues/?filter=10774
[2] https://issues.shibboleth.net/jira/issues/?filter=10773
[3] http://shibboleth.net/downloads/identity-provider/latest/


More information about the announce mailing list