IdP 3.3.3/CAS Advisory clarification

[Marvin Addison]

On Wed, May 16, 2018 at 11:34 AM O'Dowd, Josh <Josh.O'Dowd at mso.umt.edu>
wrote:

> The solutions appear to be upgrade to 3.3.3, or change cas config to use
> encoding service ticket.
>

That is correct. Upgrade or swap components to mitigate the vulnerability.

M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180516/4712fc10/attachment.html>