InCommon Operations Notifications

[Nick Roy <>]

Hi all,

If you are running SimpleSAMLphp, please be prepared to run updates on 
Wednesday.

Best Regards,

Nick Roy
Director of Technology and Strategy
InCommon

Forwarded message:

> From: 'Jaime Pérez Crespo' via SimpleSAMLphp Announce 
> <>
> To: 
> Subject: Security issue in SimpleSAMLphp
> Date: Mon, 4 Nov 2019 10:35:50 +0000
>
> Hi all,
>
> We have been made aware of a security issue affecting all SimpleSAMLphp 
> instances deployed as a service provider (basically, using SimpleSAMLphp to 
> protect access to your application). This issue has been deemed critical, 
> and will therefore need an urgent update. We will be releasing 
> SimpleSAMLphp 1.17.7 during next Wednesday the 6th of November, at a time 
> yet to be determined. We urge all SimpleSAMLphp users to make sure they are 
> running the current stable version, so that upgrading to the new release 
> doesn’t have any side effects, and to be prepared to upgrade their 
> deployments as soon as the new stable release is published.
>
> The details of the issue are embargoed for the time being, but will be made 
> public after the bugfix release has been published. CVE 2019-3465 has been 
> assigned to this issue.
>
> -- 
> Jaime Pérez
> Uninett / Feide
>
> PGP: 9A08 EA20 E062 70B4 616B  43E3 562A FE3A 6293 62C2
> https://keybase.io/jaimeperez
>
> "Two roads diverged in a wood, and I, I took the one less traveled by, and 
> that has made all the difference."
> - Robert Frost
>
> -- 
> You received this message because you are subscribed to the Google Groups 
> "SimpleSAMLphp Announce" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to .
> To view this discussion on the web visit 
> https://groups.google.com/d/msgid/simplesamlphp-announce/CF5C6559-AB6B-4BF0-856F-12575251A141%40uninett.no.

Attachment: signature.asc
Description: OpenPGP digital signature