Regression identified in Service Provider library, new version pushed

Jeffrey Eaton jeaton at cmu.edu
Thu Dec 14 10:51:48 EST 2017


I read this section:

and updated SP 2.6.1 packages are available for Windows and Linux with the fixed library.

to mean that the Shibboleth RPM itself was updated on Linux as well.  If that's not the case then I apologize.

-jeaton

On Dec 14, 2017, at 10:01 AM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:

So a new version was released without bumping the version number?

The affected library was bumped, exactly as always.

That seems extra unfortunate.  We’re hitting the bug now as the InCommon
metadata file is expiring across our servers, and when I looked initially I didn’t
realize the version had changed because of this.

A yum update would have patched the affected library, again, exactly as always. If there were a bug in libgcc, you wouldn't get the fix by updating applications, this is no different. What you are implying would be incorrect behavior on the part of the packaging.

If you mean Windows, the installer was updated to a new service release version that is labeled. If there's some other mechanism to use there, I'm listening.

And the issue was announced on top of that.

-- Scott

--
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20171214/62ce0788/attachment.html>


More information about the users mailing list