While the IdP is not believed to be vulnerable to the issues, the update was done out of an abundance of caution. This is a patch update containining a few bug fixes and an updated version of the Jackson JSON parser to address some security issues. It is unneeded by anyone maintaining their own Java container, which continues to be strongly recommended. This is a service release of the Windows installation package in order to address a security issue in Jetty, which has been updated to version 9.4.30. Those likely to be operating this branch beyond the end-of-life date approaching should consider using this version to be as current as possible. This is the final patch release of the V3 branch of the IdP in order to "finalize" the set of library dependencies included to the most current set practical as a final roll up for this branch. See ReleaseNotes for information on the new major branch of releases. 11.4 Deprecation Warnings in Preparation for V4.
0 kommentar(er)
