Is picketlink's Jboss7 Saml implementation affected by recently published security hole?

[didier2011]

Hallo,

last week there was a new publication about a SAML security hole?

http://www.nds.rub.de/research/publications/BreakingSAML/

Is picketlink/Jboss7/SSO/SAML affected by this?

I need an official statement.

Best regards,

Dieter

[anil.saldhana]

We are investigating.  For more information, please contact the Red Hat Security Response Team  (security AT redhat DOT com).