[RAMPART-453] Request to release the next latest rampart-trust version

• Type: Request
• Status: Resolved
• Priority: Major
• Resolution: Implemented
• Affects Version/s: 1.7.1
• Fix Version/s: 1.7.2, 1.8.0
• Component/s: rampart-trust
• Labels: security
• Assignee: Unassigned
• Reporter: Atharva Gokhale
• Created: 25/Jul/24 12:26
• Updated: 25/Oct/24 22:03
• Resolved: 25/Oct/24 22:03

Description

I primarily intended to raise this ticket to request the use of the latest version of opensaml (2.6.4) in the upcoming version of rampart-trust. However, it can be seen that the required code changes have already been made as a part of the fixes made for the following improvement ticket: https://issues.apache.org/jira/browse/RAMPART-440
Related commit: https://github.com/apache/rampart/commit/5bf6369563a2511bd40b297b01db078c6487f32f

Thus, I am raising this ticket to request the release of a new version of rampart-trust which would be inclusive of the above-mentioned code changes. This upcoming version of rampart-trust is highly being required to be able to use the latest version of opensaml (2.6.4) and in turn to get past the vulnerabilities coming with the older versions of opensaml.