PDA

View Full Version : SS SAML Ex upgrade to OpenSAML 3.5.1?


philvarner
Oct 23rd, 2011, 02:06 PM
Is there a plan to upgrade SS SAML Ex to OpenSAML 3.5.1, particularly in light of the critical security vulnerability in OpenSAML 3.4.1?
vsch
Jan 1st, 2013, 06:25 PM
The current version is using OpenSAML 2.5.3 which has the XML Signature wrapping vulnerability fixed.