Significant OpenSAML advisories/patches

[Cantor, Scott]

Given how ridiculously detailed that github issue is, we discussed a bit internally and I'll just pull the trigger now and start getting this released.

I'll send out the advisory only once everything is done and in place for people.

Sorry for all the back and forth, but this has been largely out of my hands from the very start and I'm just getting buffeted every which why on it. I don't like doing this on a Friday, but I'm not being given much choice.

-- Scott