Seitenhistorie

Unfortunately Ubuntu is no longer a viable platform for deploying the Shibboleth IDP (or anything else that requires secure operation, for that matter): It has become evident that Ubuntu does not provide security updates for Tomcat, see e.g. the lack of available fixes for CVE-2025-24813 for Tomcat 9 and Tomcat 10. There is no point in running an OS from a vendor that does provide you with applications but does not provide you with security fixes for those applications!
Debian on the other hand does and did provide security fixes for that same vulnerability for their current "stable" and previous "oldstable" releases of their OS.