Shibboleth Identity Provider on Windows, 4.1.0.1 service release
Cantor, Scott
cantor.2 at osu.edu
Mon Apr 5 12:38:38 UTC 2021
We have posted an update to the IdP Windows installer [1] in order to update the version of Jetty to 9.4.39 to address several security vulnerabilities, including a DOS flaw and a web.xml exposure bug. There are no updates to the IdP itself.
Those running Jetty of their own accord should of course be monitoring their announce list and patching independently.
-- Scott
[1] https://shibboleth.net/downloads/identity-provider/archive/4.1.0/
More information about the announce
mailing list