Basic questions about IdP 3.3.0

Klingenstein, Nate nklingenstein at calstate.edu
Fri Nov 11 19:19:33 EST 2016


Daisuke,

> 1. Does IdP 3.3.0 include any security fix?

There's a small one.

https://wiki.shibboleth.net/confluence/display/IDP30/ReleaseNotes#ReleaseNotes-3.3.0(November10,2016)
https://wiki.shibboleth.net/confluence/display/IDP30/SecurityAdvisories

> 2. Will 3.2.1 or some previous release have security fix in the future?

Who knows?  Someone might discover a new vulnerability.

You can read the version policy.  If there were a bug, there would probably be a fix for 3.3.0 and a fix for 3.2.1, but it depends on exactly what is patched and why.

https://wiki.shibboleth.net/confluence/display/DEV/ProductVersioning

Hope this helps,
Nate.


More information about the users mailing list