Shibboleth Metadata Aggregator V0.9.1 now available

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Shibboleth Metadata Aggregator V0.9.1 now available

Ian Young-3
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

A new patch release of the Shibboleth Metadata Aggregator is now available[1].

This release extends V0.9.0 with a single new stage (CDDetectionStage)[2], which
examines all the text in DOM Element-based Items (text nodes and attributes)
and marks the item as being in error if a CR character appears.

This can only be the case if the XML document contained an explicit character
reference such as 
.

This stage is specifically intended to detect metadata which would trigger the
SSPCPP-684[3] issue in the Shibboleth SP.

This patch release is being made available so that deployers of the Shibboleth
MDA can use this feature to screen metadata for this issue.

   -- Ian Young


[1] http://shibboleth.net/downloads/metadata-aggregator/0.9.1/
[2] http://shibboleth.net/api/mda/latest/net/shibboleth/metadata/dom/CRDetectionStage.html
[3] https://issues.shibboleth.net/jira/browse/SSPCPP-684

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

iQIcBAEBCAAGBQJXH0R2AAoJEJqATpfXB5x30aUP/i3oOQO1KLXDAxvQG9NUIkur
pKN8ctMAwk/zsnfnkGlqvupqXQdle4NU2I1CBrAX1xUTtjdGkwv5QqQjGyNstAgC
5clNxtaQPE6sJbfq0DPiYMDG2KT2Z2DAC6FYq4HqFxT8/qu+IMWeJPyWF3UG8xq7
e9/zX/7hXohfcLty9byZQ+DSDF5BJuOCoL2DVLU+GOl5It7uQGCwt2T8AkiisAZN
8V8RE9pmb8yztpjZtvblHlEIMRHu3C272WPtfvm7BljjD0x6Mom3Oz31gR1DAzMt
IRUD0T1KMP3P/nDezwJS8wfI5GS6FBYcShLqPHOrWU2WTLeWpk9bFFwSJSq2BHCW
pGaFzfISjkuc3Cg7mjZ64yBQ4CkT2r1IijsDGffGa0ad8pBpCVAGPy5Z5A/Lw2hR
KYqxrbPycUPkpBdFD38p7NJLRQTo5XqXFgr82sDRhp641GoVJWLQwaVolNM5QroN
bwwwNOjl+3xlS4VLybRPd4grR07ywTQvwfGoaQxG1agrKj/+wRnJCnEN2LZDh5ii
nrsXoaQ7dhBzn7/nInvODzQ3r10blnTEhi75qO15bZMHYx1QeEHcf9R40Vun685u
/lyfc54daxzwO5zqYiCr1lv587QsrErIYyaISLG5Qft20Z6eXLrGtidhlPMX1ajD
QYv89LwhZwXB5pKNawp8
=MLuz
-----END PGP SIGNATURE-----

--
To unsubscribe from this list send an email to [hidden email]