Significant OpenSAML advisories/patches

[Christopher Bongaarts]

[offlist]
Someone pointed out to me that simplesamlphp just release a new version 
to address a security vulnerability that has some of the keywords as the 
opensaml issue.  If that turns out to be close enough to enable an 
attacker to exploit the opensaml issue, might justify speeding up 
release. Not putting this on-list to avoid unneccesarily publicizing it 
earlier than needed.

https://github.com/advisories/GHSA-46r4-f8gj-xg56


On 3/13/2025 7:37 AM, Cantor, Scott via users wrote:
>> I will be working on getting libsaml RPMs built and made
>> available in the same place for testing, I will obviously not
>> push them to the mirrors as they're not final yet. I'll update
>> the list when they're ready.
> A set are built for x86_64, that's all I plan on doing for testing. They're manually available at [1] just as files one can download and install, not a formal repo.
>
> I didn't intend the rev to be 3.3.1-3 instead of 3.3.1-1 but it's of no import, I'll bump to 4 when the final release is done next week.
>
> -- Scott
>
> [1] https://shibboleth.net/downloads/prerelease/RPMS/
>
>
>
>

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%