Shibboleth Service Provider V3.0.0 now available
cantor.2 at osu.edu
Wed Jul 18 09:45:10 EDT 2018
> I assume there is no known vulnerability in V2.6.1 because "2.6.1" is green:
Nothing beyond Xerces itself being a rotted mess (but it's only a slightly less rotted mess now so that's not exactly a huge benefit).
With at least a couple of major bugs reported, it appears holding off for a 3.0.1 is wise but I probably will push it out today anyway, once I'm in the headspace it doesn't take long to get releases done.
More information about the users