What to do about Xalan?

Cantor, Scott cantor.2 at osu.edu
Tue Jan 10 18:24:06 GMT 2023


This xmltooling patch is now released (3.2.3). The SP has a patch coming shortly but it's unrelated stuff. The commit in question is

https://git.shibboleth.net/view/?p=cpp-xmltooling.git;a=commit;h=836c962f5c2ddfd3c18c06ced29a3f8e1dc818b0

I am not aware of any code paths that could execute any Xalan transforms with this applied. (That doesn't mean there aren't any, I'm being careful with my language here.)

-- Scott




More information about the Pkg-shibboleth-devel mailing list