Remote attribute-filter.xml not updating after upgrading

[Cantor, Scott]

On 9/2/15, 3:02 AM, "users on behalf of Kaspar Brand" <users-bounces at shibboleth.net on behalf of kaspar.brand at switch.ch> wrote:


>
>Yes and no. It definitely depends on whether the JRE includes the
>CVE-2015-2625 "fix" [1], but as Chris is pointing out, the issue does
>not occur with openws-1.5.4.jar... which seems quite puzzling, as the
>only change from 1.5.4 to 1.5.5 is about setting timeouts (see attached
>diff).

I assumed there was a Java update included in the mix, since that's quite common when people update software, not that the Java bug wasn't manifesting before.

-- Scott