Basic questions about IdP 3.3.0

[Daisuke Miyakawa]

> > 2. Will 3.2.1 or some previous release have security fix in the future?
>
> Who knows?  Someone might discover a new vulnerability.
>
> You can read the version policy.  If there were a bug, there would
> probably be a fix for 3.3.0 and a fix for 3.2.1, but it depends on exactly
> what is patched and why.
>
> https://wiki.shibboleth.net/confluence/display/DEV/ProductVersioning
>
>
Surely we never know if security problems will be found,
but I think community should know if fix will be released in those cases.

Official wiki explicitly says 3.3.0 is the current stable release,
so users can think 3.3 will receive security fix.

The wiki also implies 3.2.1 is NOT a previous stable release.
So I understand 3.2.1 will NOT have a fix even when security problems
are reported in the (even near) future.

https://wiki.shibboleth.net/confluence/display/IDP30/Home

> The current stable release of the Identity Provider is V3.3.0,
> and there is *no supported previous stable release* .

Seems inconsistent. Wiki may be just wrong.

Hope this helps,
>

It helped. Thank you!



> Nate.
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Daisuke Miyakawa (宮川大輔)
d.miyakawa at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161112/ceee0077/attachment.html>