SimpleSAMLphp 1.17.7 - Critical Security Release

Wolfgang Pempe pempe at dfn.de
Mi Nov 6 17:57:44 CET 2019


fyi (Mehrfachempfang bitte entschuldigen)

Am 06.11.2019 um 15:58 schrieb 'Jaime Pérez Crespo' via SimpleSAMLphp 
Announce:
> Hi,
> 
> SimpleSAMLphp 1.17.7 has just been released. This is a critical security release, as previously announced, addressing SSPSA 201911-01. The advisory with details on the security issue is still embargoed, although it will be made public in the website tomorrow, November 7, around 2PM CET.
> 
> We would like to stress that this is a critical security release, and as it affects all SimpleSAMLphp users using it as a service provider (that is, in order to protect access to their applications), we encourage all to upgrade as soon as possible.
> 
> The new release is available for download here:
> 
> https://github.com/simplesamlphp/simplesamlphp/releases/download/v1.17.7/simplesamlphp-1.17.7.tar.gz
> 
> You can verify the integrity of this file by comparing the SHA256 digest: 848996e0c8a8367f2e98960b54f719740c3da1dd62081e712eb2c5beb28d971e
> 
> Regards,
> 

-- 
---------------------------------------------------------------------
Wolfgang Pempe                         Phone  : +49 30 884299-308
DFN-Verein                             Fax    : +49 30 884299-370
Alexanderplatz 1                       E-Mail : pempe at dfn.de
D-10178 Berlin                         WWW    : http://www.dfn.de
---------------------------------------------------------------------
--------------------- Deutsches Forschungsnetz ----------------------
--------- Germany's National Research and Education Network ---------
---------------------------------------------------------------------

-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname   : smime.p7s
Dateityp    : application/pkcs7-signature
Dateigröße  : 5407 bytes
Beschreibung: S/MIME Cryptographic Signature
URL         : <http://listserv.aai.dfn.de/pipermail/aai-users/attachments/20191106/17de3cdd/attachment.bin>


Mehr Informationen über die Mailingliste Aai-users