From: Russ Allbery Date: Tue, 10 Nov 2009 23:42:43 +0000 (-0800) Subject: Add additional upstream changes for 2.3 X-Git-Url: http://www.project-moonshot.org/gitweb/?p=shibboleth%2Fsp.git;a=commitdiff_plain;h=86b8a8edb8cded41e67f4e544133dfea11942d9f Add additional upstream changes for 2.3 --- diff --git a/debian/changelog b/debian/changelog index 8a252eb..cb417dc 100644 --- a/debian/changelog +++ b/debian/changelog @@ -6,6 +6,18 @@ shibboleth-sp2 (2.3+dfsg-1) UNRELEASED; urgency=low abused for script injection and other cross-site scripting attacks. The complete fix also requires newer xmltooling and opensaml2 packages. (Closes: #555608, CVE-2009-3300) + - Avoid shibd crash on dead memcache server. + - Pass the affiliation name to the session initiator. + - Correctly handle a bogus ACS. + - Allow overriding the URL that's passed to the DS. + - Add schema types for new attribute decoders introduced in 2.2. + - Handle success with partial logout in the logout UI code. + - Fix POST data preservation with empty parameters and empty forms. + - Fix SAML 1 specification of attributes in the query plugin. + - Shorten ePTId-type persistent identifiers. + - Use an ID rather than a whole doc reference for generated metadata. + - Fix spelling of scopeDelimiter in the configuration parser, making + the code and documentation match the schema. * Fix watch file for the new version mangling. [ Ferenc Wagner ]