Hi Baron. It’s the “binary only” release hidden from repo before the security “grace period” has passed.
>From that post: "All source code and repository tags that contain fixes for this issue are kept privately until the grace period has passed. Note that repository tags are generally irrelevant when it comes to applying fixes described below, unless you intend to build the CAS codebase from source and a tagged commit instead of relying on a binary published release." HTH, D. On Tue, Sep 19, 2023 at 16:15 Baron Fujimoto <ba...@hawaii.edu> wrote: > The advisory directs you to, "Modify your CAS overlay to point to the > version 6.6.12" > <https://apereo.github.io/2023/09/14/oauth-vuln/#66x> > > Should 6.6.12 show up on the releases page at < > https://github.com/apereo/cas/releases> (or tags < > https://github.com/apereo/cas/tags>? > > On Thu, Sep 14, 2023 at 7:08 PM Misagh <misagh.moay...@gmail.com> wrote: > >> Please see https://apereo.github.io/2023/09/14/oauth-vuln/ >> > > -- > Baron Fujimoto <ba...@hawaii.edu> ::: UH Information Technology Services > minutas cantorum, minutas balorum, minutas carboratum descendus pantorum > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+unsubscr...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL25Cd8edE1ox48rpcFPjaX-dTpm2tVswMS%3DzmgMqM4SBg%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAAjLUL25Cd8edE1ox48rpcFPjaX-dTpm2tVswMS%3DzmgMqM4SBg%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAMpiYKiPm8UeAPJP%2B9vRAaLK3GGBQ%2Bf0ALNcbgT_wkou0Oxv5A%40mail.gmail.com.
