[OpenSAML] regarding secadv_20110725 and OIOSAML
Brian Graversen
bbg at trifork.com
Wed Aug 3 09:29:00 BST 2011
For those that uses the OIOSAML serviceprovider filter (based on OpenSAML), a new release
has been made available, that addresses the XML Signature Wrapping attack found in OpenSAML
http://shibboleth.internet2.edu/secadv/secadv_20110725.txt
Upgrade instructions (and the latest release) can be found here
http://digitaliser.dk/resource/1664828
Kind regards
Brian Graversen
More information about the users
mailing list