Security fix diffs for 1.3.x
cantor.2 at osu.edu
Fri Nov 6 21:56:23 UTC 2009
The diffs related to the security fix for v1.3.5 of the SP should be
captured by these two sets:
The former change isn't part of the fix per se, but is a change required to
ensure the SP doesn't generate any redirects that the fix would reject, so
has to be included.
The general model for this fix is a partial template for what might be done
to the 2.x SP to avoid the soname changes, namely duplicating a checking
function across every module/filter.
More information about the Pkg-shibboleth-devel