Shibboleth Service Provider V3.2.3 now available

Cantor, Scott cantor.2 at osu.edu
Wed Jul 7 12:32:45 UTC 2021


A new patch release of the SP, V3.2.3, is now available. [1]

A regression in the RequestMap feature causing random crashes on some systems was identified, necessitating this patch update. Most uses of this feature tend to be on Windows, so that's the primary platform affected but the bug was generic if the feature were to be used on other systems.

It isn't easily exploitable by specific requests, so it's a borderline sort of denial of service risk and I chose not to do an advisory, and anybody affected won't need much incentive to get the patch anyway.

I'm building the RPMs now and should get them to the mirrors this morning.

-- Scott

[1] https://shibboleth.net/downloads/service-provider/latest/



More information about the announce mailing list