> I cannot further comment on the impact upon Moonshot-related packages, but I can ask their Debian maintainer if needed.
So I asked Sam Hartman on the pkg-shibboleth-devel list and he replied:
> So, there was a new release of shibboleth-resolver along with the 3.x SP.
> I'm not sure whether the 2.x version works with the 3.x libs or not.
> There are no changes with moonshot-gss-eap for the new stack.
> It's probably desirable to rebuild the moonshot binaries, because C++ ABIs may not be entirely stable, but no source changes should be required.
Scott Cantor added that there is "not a chance" that the old shibboleth-resolver works with the SPv3 stack.
So:
1. shibboleth-resolver 3.0.0 should also be part of this SRU, otherwise the version currently in bionic will stop working.
2. moonshot-gss-eap needs a rebuild but would not be affected otherwise.
> I cannot further comment on the impact upon Moonshot-related packages, but I can ask their Debian maintainer if needed.
So I asked Sam Hartman on the pkg-shibboleth- devel list and he replied:
> So, there was a new release of shibboleth-resolver along with the 3.x SP.
> I'm not sure whether the 2.x version works with the 3.x libs or not.
> There are no changes with moonshot-gss-eap for the new stack.
> It's probably desirable to rebuild the moonshot binaries, because C++ ABIs may not be entirely stable, but no source changes should be required.
Scott Cantor added that there is "not a chance" that the old shibboleth-resolver works with the SPv3 stack.
So:
1. shibboleth-resolver 3.0.0 should also be part of this SRU, otherwise the version currently in bionic will stop working.
2. moonshot-gss-eap needs a rebuild but would not be affected otherwise.