<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Sorry, just looking for clarification here.</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
I note the latest release as of this morning is 5.1.6 (/latest5 says it was published this morning).</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
If we do NOT use CAS, we should upgrade to 5.1.5 is my read of this? Our internal patching policy doesn't insist on the latest version, but does insist that it's a supported (so this would match up and keep our cyber guy happy).</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Thanks</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
Dave</div>
<div class="elementToProof" id="Signature">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 10pt; color: rgb(0, 0, 0);" class="elementToProof">
_________________________________________________</div>
<table style="box-sizing: border-box; border-collapse: collapse; border-spacing: 0px;">
<tbody>
<tr>
<td style="padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 96.45pt;">
<p style="line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;" class="elementToProof">
<span style="font-family: Arial, sans-serif; font-size: 10pt;"><b>Dave Perry</b></span><span style="font-family: "Times New Roman", serif; font-size: 12pt;"><br>
</span><span style="font-family: Arial, sans-serif; font-size: 9pt;">Application Analyst
<b>| </b>Innovation & Technology Services<br>
<br>
York St John University </span></p>
<p style="line-height: 120%; margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;" class="elementToProof">
<span style="font-family: Arial, sans-serif; font-size: 9pt;">Lord Mayor’s Walk, York, YO31 7EX<br>
T: +44(0)1904 876 0000<br>
</span><a style="margin-top: 0px; margin-bottom: 0px;" title="mailto:d.perry1@yorksj.ac.uk" href="mailto:d.perry1@yorksj.ac.uk">d.perry1@yorksj.ac.uk</a><span style="font-family: Arial, sans-serif; font-size: 9pt;">
<b>| </b><a style="margin-top: 0px; margin-bottom: 0px;" href="http://www.yorksj.ac.uk/">www.yorksj.ac.uk</a> </span></p>
</td>
</tr>
<tr>
<td style="padding: 0cm 5.4pt; vertical-align: top; width: 303.75pt; height: 74.7pt;">
<p style="margin: 0cm; font-family: Calibri, sans-serif; font-size: 11pt;" class="elementToProof">
<span style="font-family: Arial, sans-serif; font-size: 12pt;"><b><img style="max-width: 100%; margin-top: 0px; margin-bottom: 0px;" size="12155" data-outlook-trace="F:1|T:1" src="cid:8f2e8570-54e9-4b04-90ef-361660a46e8a"> </b></span></p>
</td>
</tr>
</tbody>
</table>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> users <users-bounces@shibboleth.net> on behalf of Cantor, Scott via users <users@shibboleth.net><br>
<b>Sent:</b> Tuesday, August 19, 2025 6:50 PM<br>
<b>To:</b> users@shibboleth.net <users@shibboleth.net><br>
<b>Cc:</b> Cantor, Scott <cantor.2@osu.edu><br>
<b>Subject:</b> Re: IdP patch and Spring CVE</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.<br>
<br>
<br>
As it happens, on top of the Spring issue, a security report came in.<br>
<br>
That fix is being included in the 5.1.6 release, but will delay it a bit, hopefully not into next week but that's possible.<br>
<br>
I provided a little more detail about that to the member alert list but I won't say more here other than it's a significant issue and it only impacts use of CAS.<br>
<br>
-- Scott<br>
<br>
<br>
--<br>
For Consortium Member technical support, see <a href="https://shibboleth.atlassian.net/wiki/x/ZYEpPw">
https://eur02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshibboleth.atlassian.net%2Fwiki%2Fx%2FZYEpPw&data=05%7C02%7Cd.perry1%40yorksj.ac.uk%7C66aeaa2bd17544970d5c08dddf48fa31%7C5c8ae38ef85b4309b7ec862815a37aee%7C0%7C0%7C638912226709547723%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=U%2BIC95YbvYmCE9BDhDh5jvH9elrmBl9qesfjqkWYvNI%3D&reserved=0</a><br>
To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br>
</div>
</span></font></div>
<img src="https://www.yorksj.ac.uk/media/content-assets/safe-images/brand-guidelines/downloads/Social-Inclusion-Main-Email-Header_2024-11-25_09-03-43-949.png" alt="York St John University is the University of the Year for Social Inclusion in The Times and Sunday Times Good University Guide 2025">
</body>
</html>