Don't include /var/run/shibboleth in the package and clean up on remove

[shibboleth/sp.git] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 77caff0..ac23b51 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,43 @@
+shibboleth-sp2 (2.2.1+dfsg-1) UNRELEASED; urgency=low
+
+  * New upstream release.
+    - SECURITY: Fix improper handling of certificate names containing nul
+      characters.
+    - SECURITY: Correctly validate the use attribute of KeyDescriptors,
+      preventing use of a key for signing or for encryption if its use
+      field says it may not be used for that purpose.
+    - Support preserving form data across user authentication.
+    - Support internal server redirection while maintaining protection.
+    - Fix incompatibility between lazy sessions and servlet containers.
+    - Fix some problems with dynamic metadata resolution.
+    - Fix incompatibility with mod_include.
+    - Fix single logout via SOAP.
+    - Fix shibd crash with invalid metadata.
+    - Fix crash in chaining attribute resolver.
+    - Avoid infinite loop on empty attribute mapped to REMOTE_USER.
+    - Fix handling of some Unicode data in relaystate data in URLs.
+    - Correctly return Success to LogoutRequest where appropriate.
+    - Avoid chunked encoding in back-channel calls.
+    - Correctly check Recipient values in assertions.
+    - Fix attributePrefix handling in some contexts.
+    - Fix generated metadata DiscoveryResponse.
+    - Fix handling of unsigned responses with encryption.
+    - Fix handling of InProcess property.
+  * Rename library package for upstream SONAME bump.
+  * Tighten build dependencies and schema package dependencies on
+    opensaml2 and xmltooling.
+  * Build against Xerces-C 3.0.
+  * Dynamically determine the Debian and upstream package versions for
+    get-orig-source from debian/changelog.
+  * Update libapache2-mod-shib2's README.Debian for changes to the
+    TestShib web pages.
+  * Update standards version to 3.8.3.
+    - Create /var/run/shibboleth in the init script if it doesn't exist.
+    - Don't ship /var/run/shibboleth in the package.
+    - Remove /var/run/shibboleth in postrm if it exists.
+
+ -- Russ Allbery <rra@debian.org>  Fri, 24 Jul 2009 15:29:01 -0700
+
 shibboleth-sp2 (2.1.dfsg1-2) unstable; urgency=low
 
   * Redo the variable quoting in doxygen.m4 so that configure can be