I haven't tried this, but the advisory only mentions the OpenSAML-C libraries. Is it known if this effects the opensaml java libs? Thanks -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://shibboleth.net/pipermail/dev/attachments/20180228/16708e4d/attachment.html>