Shibboleth Identity Provider 3.0.0 Service Update for Windows

[Cantor, Scott]

The Shibboleth Project has released an update to the IdP 3.0.0 Windows 
Installer to address a security issue in Jetty that was announced today 
[1]. Our Windows package includes an option to install a managed Jetty 
instance, and this is a service release by us to incorporate the updated 
Jetty version that was just released to correct the bug.

This will be a standard practice for us going forward, this is just the 
first case of it happening. We are representing these service releases by 
including a forth version digit in the Windows installer (this particular 
release happens to be 3.0.0.11) so you can easily tell which version you 
have. The actual IdP version hasn't changed because the software hasn't.

Documentation on upgrading on Windows has been added to the wiki [2] and 
the information about this release has been added to the Release Notes 
page [3].

Of course, anybody using Jetty separately from our version should also 
review their system to see if they're affected.

We *may* eventually incorporate a similar nomenclature for the other 
installation packages if and when we incorporate Jetty or any other 
bundled software into the package as part of managing our responsibility 
for updating those packages mid-cycle when necessary. It's likely the SP 
will move to this model the next time a minor or major upgrade to it 
occurs.

Thanks to Rod for the quick turnaround getting the fixed package done.

-- Scott

[1] http://dev.eclipse.org/mhonarc/lists/jetty-announce/msg00075.html
[2] 
https://wiki.shibboleth.net/confluence/display/IDP30/WindowsInstallation
[3] https://wiki.shibboleth.net/confluence/display/IDP30/ReleaseNotes