IdP advisory forthcoming

[Kenny MacDonald]

On Wed, 2022-12-14 at 01:13 +0000, Cantor, Scott via users wrote:
> An IdP advisory will be coming soon, possibly by the end of this week. It's a bit unusual and isn't accompanying a patch. It involves risks to non-current IdP versions (i.e. not 4.2)  primarily when Java isn't patched.
>
> The immediate risk is (extremely) critical, but is much lower if Java isn't out of date.

Hi Scott,

Thanks for the heads up.

Might this have been suitable for the announce at shibboleth.net list as
well?  Some people may choose to subscribe to that, and not also this
(users) list.

Regards,

Kenny.

The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336. Is e buidheann carthannais a th’ ann an Oilthigh Dhùn Èideann, clàraichte an Alba, àireamh clàraidh SC005336.