Shibboleth Identity Provider V5.1.1 now available

[Cantor, Scott]

The Shibboleth Project has released IdP V5.1.1, a patch that primarily updates the Spring Framework version to address a low-importance security issue that impacts the IdP's CAS support.

It also fixes a couple of regressions in 5.1.0.

Packages are available now [1] and the Release Notes are updated. [2]

The advisory will be forthcoming.

We are actively working to prepare the V4.3.2 patch release for the same issue, likely this week, but due to the public nature of the issue, the low severity, and limited impact have elected to prioritize getting the V5 patch done and published.

-- Scott 

[1] https://shibboleth.net/downloads/identity-provider/latest5/
[2] https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199500367/