CAS 4.2.6 Release Announcement

179 views

Skip to first unread message

Misagh Moayyed

unread,

Sep 29, 2016, 11:56:53 AM9/29/16

to cas-...@apereo.org, cas...@apereo.org, CAS Announce, cas-apps...@lists.jasig.org

CAS 4.2.6 has been released.

Among other things, this release addresses a rather serious security issue where successfully exercising this vulnerability may allow an adversary to gain insight into the running CAS server.

If you have deployed **any version** of CAS 4.2.x, you **MUST** take action to upgrade. If you have deployed any **other** versions of CAS, disregard this issue.