inc-ops-notifications - [InCommon NOTICE] potential issue with old versions of the Shibboleth IdP

Subject: InCommon Operations Notifications

List archive

[InCommon NOTICE] potential issue with old versions of the Shibboleth IdP

From: Tom Scavo <>
To:
Subject: [InCommon NOTICE] potential issue with old versions of the Shibboleth IdP
Date: Fri, 13 Dec 2013 07:24:45 -0500

If you're running an old version of the Shibboleth IdP software,
please read on, otherwise you can ignore this message, which is FYI
only.

Yesterday, a user reported a potential encoding issue with InCommon
metadata. That turned out NOT to be the case. Instead we discovered an
obscure bug in old versions of the Shibboleth IdP (version 2.1.5 and
earlier). FYI, the details of the investigation have been thoroughly
documented by the Shibboleth developers:

http://marc.info/?l=shibboleth-dev&m=138685201118387&w=2

The good news is: The bug doesn't exist in later (supported) versions
of the Shibboleth IdP software. So this note is just a friendly
reminder to keep your software current (but you already knew that :)

Thanks,

Tom

[InCommon NOTICE] potential issue with old versions of the Shibboleth IdP, Tom Scavo, 12/13/2013

List archive

[InCommon NOTICE] potential issue with old versions of the Shibboleth IdP