SP release before March 2020?

[Etienne Dysli Metref]

On 06/01/2020 14.02, Cantor, Scott wrote:
> The SP update won't make that deadline, but the critical bug fix for
> the race condition in the new cookie session code really should get
> into that release if possible, and that's just a patch to xmltooling
> I already committed, so I'll see what I can do about at least tagging
> that library update, even if I don't package it myself yet.
Just to make sure I understand correctly: Would that be just a
xmltooling release then?
A critical bug fix may be possible to push through to an
already-released distribution, but from my limited experience only
security patches make it.

> The next big source of uncertainty is OpenSSL 3.0.0, which isn't due
> until Q4 at the earliest.

If Debian starts their freeze for Bullseye around the beginning of 2021
(no dates announced yet, just guessing from past releases), then I doubt
this OpenSSL 3.0.0 will make it...

  Etienne

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://shibboleth.net/pipermail/dev/attachments/20200106/1cd5d387/attachment-0001.sig>