Shibboleth Identity Provider V4.1.5 now available

[Cantor, Scott]

The Shibboleth Project has released V4.1.5 of the Identity Provider software [1], a patch release to address some outstanding library vulnerabilities of no particular impact to the project and to update the logging libraries to pull in a somewhat hardened version released by the logback developer.

The release notes [2] provide some additional detail. Notably, a couple of more advanced features were removed from the logging library in the interest of limiting future vulnerabilities, and while we don't ship any examples of their use or expect most have used them, it is a change.

Barring additional security releases, this is probably (famous last words) the final V4.1 release as we try and get work on 4.2 wrapped up soon.

-- Scott

[1] https://shibboleth.net/downloads/identity-provider/latest4/
[2] https://shibboleth.atlassian.net/wiki/spaces/IDP4/pages/1265631499/ReleaseNotes