Update simplesamlphp/simplesamlphp and simplesamlphp/saml2 libraries

[edmund-dunn]

User Story or Problem Statement

On 2 Dec 2024 there were 3 vulnerabilities announced for simplesamlphp. They are listed below.

Description or Additional Context

Found 3 security vulnerability advisories affecting 2 packages:
+-------------------+----------------------------------------------------------------------------------+
| Package           | simplesamlphp/saml2                                                              |
| Severity          | medium                                                                           |
| CVE               | CVE-2024-52806                                                                   |
| Title             | SimpleSAMLphp SAML2 has an XXE in parsing SAML messages                          |
| URL               | https://github.com/advisories/GHSA-pxm4-r5ph-q2m2                                |
| Affected versions | >=5.0.0-alpha.1,<5.0.0-alpha.18|<4.6.14                                          |
| Reported at       | 2024-12-02T17:25:43+00:00                                                        |
+-------------------+----------------------------------------------------------------------------------+
+-------------------+----------------------------------------------------------------------------------+
| Package           | simplesamlphp/saml2                                                              |
| Severity          | high                                                                             |
| CVE               | CVE-2024-52596                                                                   |
| Title             | SimpleSAMLphp xml-common XXE vulnerability                                       |
| URL               | https://github.com/advisories/GHSA-2x65-fpch-2fcm                                |
| Affected versions | <4.6.14                                                                          |
| Reported at       | 2024-12-02T17:14:30+00:00                                                        |
+-------------------+----------------------------------------------------------------------------------+
+-------------------+----------------------------------------------------------------------------------+
| Package           | simplesamlphp/simplesamlphp                                                      |
| Severity          | high                                                                             |
| CVE               | NO CVE                                                                           |
| Title             | SimpleSAMLphp vulnerable to XXE in parsing SAML messages                         |
| URL               | https://github.com/advisories/GHSA-j5g2-q29x-cw3h                                |
| Affected versions | <2.0.15|>=2.1.0,<2.1.7|>=2.2.0,<2.2.4|>=2.3.0,<2.3.4                             |
| Reported at       | 2024-12-02T20:00:29+00:00                                                        |
| Advisory ID       | PKSA-5hp7-ndvs-4c4w                                                              |
+-------------------+----------------------------------------------------------------------------------+

Steps for Implementation

Acceptance Criteria

• Update simplesamlphp/saml2 to <= v4.6.14
• Update 'simplesamlphp/simplesamlphp` to <= v2.3.4