Shibboleth IdP 4.1

[Michael Grady]

Given that 4.1 has more changes in it than is typical for a new "minor version", will there be any difference in usual policy if a security issue was to come up that impacted IdP 4.x? I assume not, given that the Main IdP 4 page says:

  "The current stable release of the Identity Provider is V4.1.0, and there is no previous stable release."

That the only patches will be for 4.1+  -- is that correct? 

--
Michael A. Grady
IAM Architect, Unicon, Inc.