Shibboleth Identity Provider V5.1.2 and V4.3.3 now available

[Cantor, Scott]

The Shibboleth Project has released patch updates to the V5 and V4 IdP software [1] to address a re-issued Spring advisory..

The original March advisory from us has been updated [2] and will be resent to the announce list shortly, and clarifies the IdP versions that address the issue (to our knowledge at least).

We will be taking steps in the future to address the specific dependency on Spring in this scenario in case they continue to discover more problems with it.

-- Scott 

[1] http://shibboleth.net/downloads/identity-provider/
[2] https://shibboleth.net/community/advisories/secadv_20240320.txt