xmltooling patches for 2.5 versions?

[Joseph Fischetti]

Scott,
For clarification, the notice sent out on the 27th read:

- Upgrade to V1.6.4 or later of the XMLTooling-C library and restart the
affected processes (shibd, Apache, etc.)

- Linux installations relying on official RPM packages can upgrade to
the latest package versions to obtain the fix.
 
I have SP's on both rhel 7.4 and SLES12SP2.  The RHEL servers have the latest shibboleth package (2.6.1-3.1), but when I check for the xmltooling library, I see version 1.6.3:
libxmltooling7-1.6.3-3.1.x86_64

Is it "Upgrade to V1.6.4 AND The latest RPM packages?" or "Upgrade to V1.6.4 OR the latest RPM packages [that already include a fix]"?

Is building from source the only option for the SLES machines?  SUSE has V2.5.5 in their repo's; when I try the official repo they're only available as source packages.
 
Thanks
Joe

Joseph Fischetti  
Linux System Administrator  
Marist College  
    

-----"users" <users-bounces at shibboleth.net> wrote: -----
To: Shib Users <users at shibboleth.net>
From: "Cantor, Scott" 
Sent by: "users" 
Date: 03/01/2018 09:01AM
Subject: RE: xmltooling patches for 2.5 versions?

> My apologies. For some reason I thought the xmltooling was from the
> shibboleth project. Someone else set me straight! Sorry for the noise.

I didn't say we didn't own the code, I said there isn't any chance we would ever produce an update for an unsupported version. That's what "unsupported" means. I qualified "from the project" because Debian has backported versions of that branch that are maintained by those packagers. So there is likely *a* maintained 2.5 branch, but it isn't from us.

-- Scott

-- 
For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net