updated shib installation script to XMLTooling-C 1.6.4 to fix

vulnerability CVE-2018-0489

dockerfiles/Dockerfile.dspace

@@ -7,11 +7,11 @@ FROM ubuntu
 LABEL maintainer="Alexander König <Alexander.Koenig@eurac.edu>"
 
 # install cpanm and dependencies
-RUN apt-get update &&\
-        apt-get -y upgrade &&\
-        apt-get -y install make gcc wget cpanminus
+RUN apt-get update \
+&&  apt-get -y upgrade \
+&&  apt-get -y install make gcc wget cpanminus
 
-RUN cpanm File::Spec::Functions
+RUN cpanm -n File::Spec::Functions
 RUN cpanm Term::ReadLine
 
 # install jdk, ant, psql, mvn, make, libxml, xsltproc, zip, wget

dockerfiles/commul-customization/shibboleth_sp_with_fastcgi.sh

@@ -24,7 +24,7 @@ function get {
 get log4shib 1.0.9 http://shibboleth.net/downloads/log4shib/latest/
 get xerces-c 3.2.0 http://mirror.hosting90.cz/apache/xerces/c/3/sources/
 get xml-security-c 1.7.3 http://mirror.hosting90.cz/apache/santuario/c-library/
-get xmltooling 1.6.3 http://shibboleth.net/downloads/c++-opensaml/latest/
+get xmltooling 1.6.4 http://shibboleth.net/downloads/c++-opensaml/latest/
 get opensaml 2.6.1 http://shibboleth.net/downloads/c++-opensaml/latest/
 get shibboleth-sp 2.6.1 http://shibboleth.net/downloads/service-provider/latest/