Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Finally, an SP security issue was reported last week and remediated with a patch to one of our libraries this week. In the process of preparing that patch, I noted that curl has dropped support for 32-bit systems in its 8.x releases. This forces us to drop support for 32-bit Windows in a future update since we may need to bump to a newer curl version if a security issue requires it. We are taking steps to preserve (if possible) support for 32-bit IIS app pools because the impact of the curl change is confined to the shibd library stack, but deployers that may have chosen to manually alter their Windows systems to use the 32-bit shibd service will be forced to undo that change. Of course, this also means that 32-bit Windows itself is no longer possible to support (it has been officially unsupported for a while now, but will be physically unsupported entirely in the future).