[ 17:02 girgen  ]

• 495367 devel/xmltooling/Makefile
• 495367 devel/xmltooling/distinfo
• 495367 devel/xmltooling/files/patch-xmltooling_util_ParserPool.cpp
• 495367 devel/xmltooling/pkg-plist
• 495367 security/opensaml/Makefile
• 495367 security/opensaml/distinfo
• 495367 security/opensaml/pkg-plist
• 495367 security/shibboleth-sp/Makefile
• 495367 security/shibboleth-sp/distinfo
• 495367 security/shibboleth-sp/pkg-plist

Update Shibboleth and its tool chain to 3.0.4

The security problem was patched alreadyin 3.0.3p1, but all users are
recommended to update to the latest version at next service window.

Security:	CVE-2019-9628
		https://shibboleth.net/community/advisories/secadv_20190311.txt
Release notes:	https://wiki.shibboleth.net/confluence/display/SP3/ReleaseNotes

[ 17:50 girgen  ]

• 495308 devel/xmltooling/Makefile
• 495308 devel/xmltooling/files/patch-xmltooling_util_ParserPool.cpp

Pull upstreams fix from upcoming release

This fixes a DoS scenario. The commit message from the original commit is

	CPPXT - Crash due to uncaught DOMException