Regression identified in Service Provider library, new version pushed

[Jeffrey Eaton]

So a new version was released without bumping the version number?  That seems extra unfortunate.  We’re hitting the bug now as the InCommon metadata file is expiring across our servers, and when I looked initially I didn’t realize the version had changed because of this.

-jeaton

> On Nov 16, 2017, at 7:20 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> A fix unrelated to the security issue we just released a patch for was erroneous and unfortunately caused a regression in the "traditional" metadata refresh code most people are relying on. An updated xmltooling library, V1.6.2, has been released to undo the change that caused the regression, and updated SP 2.6.1 packages are available for Windows and Linux with the fixed library.
> 
> The only caveat for anybody that's already applied the 2.6.1 updates is that a Linux yum update won't restart shibd, so that has to be done manually after updating the xmltooling package to restore the metadata refresh behavior.
> 
> Going straight from < 2.6.1 to the latest packages works normally without any additional care.
> 
> We apologize for the inconvenience, we'll be more conservative about including unrelated fixes in the future when it comes to getting important patches out.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to announce-unsubscribe at shibboleth.net