Shibboleth Identity Provider for Windows service update, V4.3.1.1
Cantor, Scott
cantor.2 at osu.edu
Wed Apr 19 19:03:58 UTC 2023
The Shibboleth Project has released a service update (V4.3.1.1) to the IdP on Windows installer to update Jetty to 10.0.15 in response to a pair of advisories announced yesterday. [1] Neither is all that critical but one of them involves a cookie parsing issue and was concerning enough to be cautious with.
The updated installer is in the usual place [2].
Of course, anybody operating Jetty themselves should consider updating but should be subscribed to their announce list for awareness anyway.
-- Scott
[1] https://www.eclipse.org//lists/jetty-announce/msg00176.html
[2] http://shibboleth.net/downloads/identity-provider/latest/
More information about the announce
mailing list