[ 
https://issues.apache.org/jira/browse/CXF-5565?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13911261#comment-13911261
 ] 

Willem Jiang commented on CXF-5565:
-----------------------------------

Hi Colm,

I did some work as WSS4J 1.6 does in CXF 2.6.x and 2.7.x to exclude the most 
third part dependencies of Opensaml. All the tests passed in my box after the 
upgrade. Please let me if you have any other concern about it.

Regards,

Willem

> update to opensaml 2.6.1
> ------------------------
>
>                 Key: CXF-5565
>                 URL: https://issues.apache.org/jira/browse/CXF-5565
>             Project: CXF
>          Issue Type: Task
>            Reporter: Jonathan Anstey
>            Assignee: Willem Jiang
>         Attachments: CXF-5565.patch
>
>
> Fixes CVE-2013-6440. Waiting for SMX bundles release to complete first though.



--
This message was sent by Atlassian JIRA
(v6.1.5#6160)

Reply via email to