[Shib-Users] Xerces 3.1.0 NOT supported

[Kristof BAJNOK]

[Moving the thread to the Debian list because it will likely affect the 
Debian package as well]

On Monday 15 February 2010 05.44.48 Scott Cantor wrote:
> This is just an FYI, but the recent Xerces-C parser release (3.1.0)
>  appears to include at least one fatal regression bug that will break
>  Shibboleth. It definitely crashes my unit tests, and the bug I think I
>  found (and reported to them) is in a serious enough spot that I doubt
>  the SP will work with it either.

In lenny we have a dependency to xerces-c2, aka 2.8.x.
In squeeze (testing) and sid we depend on xerces-c, which is 3.1.0-rc1 in 
squeeze and 3.1.0 in sid. I haven't experienced problems with the testing 
packages, though I haven't tested it too much either.

Scott, could you please elaborate, what kind of problems does this bug 
cause? If you get negative response from the Xerces developers, we still can 
depend on 2.8 (it's still in testing and sid), although this might be 
suboptimal.

Kristof