Shibboleth Service Provider Security Advisory [4 May 2016]

Takeshi NISHIMURA takeshi at
Thu May 5 23:55:45 EDT 2016

> Restarting the web server will not be required to effect the change.

Though it may already be clear by the word "the web server", shibd as well as httpd does not seem to be required to be restarted.

Best regards,

> 2016/05/05 1:20、Cantor, Scott <cantor.2 at> wrote:
>> Just to clarify.  If the <PathRegex> feature is not in shibboleth2.xml, should it
>> be added with add ignoreCase="false"?  I wasn't sure.
> Quoting the advisory:
>> Deployers that do _not_ make use of the <PathRegex> feature are _not_
>> impacted.
> -- Scott

More information about the users mailing list