Shibboleth SP 2.5.1 and CentOS 5.8 x64
Cantor, Scott
cantor.2 at osu.edu
Tue Jan 8 23:01:53 EST 2013
On 1/8/13 10:25 PM, "Dan McLaughlin" <dmclaughlin at tech-consortium.com>
wrote:
>I can email you the raw HTTP POST. What email address can I send it to?
I received it, and bingo, it crashed. Is there something setting the
cookie other than the SP? I'm guessing yes. I think I know what the
trigger is, if not why it broke only now, but since this is technically a
DOS issue, I will have to treat it as a security issue. I'll send you
something separately on it. The fix should be an opensaml patch.
-- Scott
More information about the users
mailing list