Shibboleth Identity Provider 2.4.3 Released

[Athanasios Douitsis]

Hello Scott,

I noticed you removed the endorsed/ directory instructions recently. Should
we remove those libs from the tomcat endorsed directory as well or we can
just leave them there?

Kind regards,
Athanasios


On Tue, Nov 4, 2014 at 4:02 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> The Shibboleth Project has released a patch update, V2.4.3, of the
> Identity Provider software, along with an update of the OpenSAML library,
> 2.6.4.
>
> This release primarily addresses the security advisory just announced
> addressing a denial of service vulnerability in the Xerces XML parser, and
> fixes a bug in the code around scripted attributes when Java 8 is used.
>
> You can download the new release from the usual location [1] and we are in
> the process of updating documentation now.
>
> -- Scott
>
> [1] http://shibboleth.net/downloads/identity-provider/latest/
>
>
> --
> To unsubscribe from this list send an email to
> announce-unsubscribe at shibboleth.net
>



-- 
Athanasios Douitsis
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141104/0d9319c4/attachment.html