CVE-2011-1411: OpenSAML library vulnerable to XML Signature wrapping attacks

[Cantor, Scott]

On 1/9/13 7:43 AM, "gprestia" <gregoriogianluca.prestia at amadeus.com> wrote:

>Good morning,
>in relation to the vulnerability announcement below (CVE-2011-1411), the
>exact revision number for the C++ version of opensaml library was provided
>(=661).
>
>Could you please provide the revision number for the java version of the
>library?

I can just quote the exact text you just cited.

Versions Affected: OpenSAML in C++, V2.4.2 and earlier, OpenSAML in Java,
V2.5.0 and earlier

-- Scott