[upki-fed:00923] Shibboleth SP $B$N@H

[$B9qN)>pJs3X8&5f=j!!3XG';vL36I!!LnED(B <xxxxxxxxxxxxxx@xxxxxxxxx>]

$B3XG'>pJs8r49(BML$B!!MxMQpJs3X8&5f=j!&3XG';vL36I$G$9!#(B
$BJ?AG$h$j3XG'$N;v6H$K$46(NO$r;r$j!$$"$j$,$H$&$4$6$$$^$9!#(B

Shibboleth Project$B$h$j(BShibboleth SP$B$K4X$9$kJ#?t$N@Hr7o$N$$$:$l$+$K3:Ev$9$k>l9g$K$O@H$C$F(BSP$B$r9=C[$7$?>l9g!$(BOS$B$O(BCentOS$B$N(B5$B7O$^$?$O(B6$B7O$H$J$j(B
$B$^$9!#$3$l$i$N(BOS$B$N>l9g$K$O!$(BShibboleth SP$B$r%j%]%8%H%jDs6!$N:G?7HG$K%"%C(B
$B%W%G!<%H$7$F$$$?$@$1$l$PBP=h$,40N;$7$^$9!#(B

$B"((B $B0MB8%Q%C%1!<%8$H$7$F!$(BApache Xerces-C XML Parser$B$b%P!<%8%g%s(B3.1.2$B$K(B
   $B%"%C%W%G!<%H$5$l$^$9!#(B

$B$=$NB>$N4D6-$G$NBP=h$K$D$$$F$O!$%;%-%e%j%F%#%"%I%P%$%6%j(B[1]$B$r$4;2>H$/$@(B
$B$5$$!#(B

$B$^$?!$(BOpenSSL[3]$B$K$D$$$F$b(BShibboleth SP$B$K4X$o$k@HpJs$,8x3+$5$l$F$$(B
$B$^$9!#$"$o$;$FBP1~$r$48!F$$$$?$@$/$3$H$r$*$9$9$a$$$?$7$^$9!#(B

$B;29M>pJs(B:

[1] Shibboleth Service Provider Security Advisory [19 March 2015]
    https://shibboleth.net/community/advisories/secadv_20150319.txt

[2] CVE-2015-0252: Apache Xerces-C XML Parser Crashes on Malformed Input
    https://shibboleth.net/community/advisories/secadv_20150319.txt

[3] OpenSSL Security Advisory [19 Mar 2015]
    http://openssl.org/news/secadv_20150319.txt

-- 
=========================================================
$B!!9qN)>pJs3X8&5f=j(B $B3X=Q4pHW2](B $B3XG';vL36I!!!JC4Ev!'LnED!K(B
$B!!(BTEL$B!'(B03-4212-2218$B!!(xxxxxxxxxxxxxxx@xxxxxxxxx
$B!!3XG'(BWeb$B%Z!<%8(B  https://www.gakunin.jp/
$B!!?=@A%7%9%F%`(B   https://office.gakunin.nii.ac.jp/
=========================================================