Basic questions about IdP 3.3.0
Cantor, Scott
cantor.2 at osu.edu
Sun Nov 13 13:07:30 EST 2016
> You can read the version policy. If there were a bug, there would probably be a fix for 3.3.0 and a fix for 3.2.1,
> but it depends on exactly what is patched and why.
The policy says no such thing.
> Official wiki explicitly says 3.3.0 is the current stable release,
> so users can think 3.3 will receive security fix.
>
>
> The wiki also implies 3.2.1 is NOT a previous stable release.
>
> So I understand 3.2.1 will NOT have a fix even when security problems
> are reported in the (even near) future.
You are entirely correct. None of that should be news to anybody. It has been the approach dating back to the start of the project.
> Seems inconsistent. Wiki may be just wrong.
I don't know what that refers to, the wiki is accurate.
As for the rest of your questions, yes, there's a security fix in 3.3 (as announced), and no there will never be a fix released for 3.2.
-- Scott
More information about the users
mailing list