@@ -33,6 +33,7 @@ Bug fixes:
33
33
* Fix segmentation fault if MellonPostReplay is enabled but
34
34
MellonPostDirectory is not set.
35
35
36
+
36
37
Version 0.13.0
37
38
---------------------------------------------------------------------------
38
39
@@ -100,6 +101,7 @@ In addition this release contains the following new features and fixes:
100
101
101
102
* Fix AssertionConsumerService lookup for PAOS requests.
102
103
104
+
103
105
Version 0.11.1
104
106
---------------------------------------------------------------------------
105
107
@@ -112,6 +114,7 @@ Security fixes:
112
114
resource exhaustion) due to missing size checks when reading
113
115
POST data.
114
116
117
+
115
118
Version 0.11.0
116
119
---------------------------------------------------------------------------
117
120
@@ -139,6 +142,7 @@ Version 0.11.0
139
142
* Fix error about missing authentication with DirectoryIndex in
140
143
Apache 2.4.
141
144
145
+
142
146
Version 0.10.0
143
147
---------------------------------------------------------------------------
144
148
@@ -158,6 +162,7 @@ Version 0.10.0
158
162
on the cookie being deleted, so this only fixes the cookie showing
159
163
up after the session is deleted.)
160
164
165
+
161
166
Version 0.9.1
162
167
---------------------------------------------------------------------------
163
168
@@ -245,6 +250,7 @@ Version 0.7.0
245
250
* Add MellonSetEvnNoPrefix directive to set environment variables
246
251
without "MELLON_"-prefix.
247
252
253
+
248
254
Version 0.6.1
249
255
---------------------------------------------------------------------------
250
256
@@ -254,6 +260,7 @@ Version 0.6.1
254
260
* Add a fallback for the case where the POST replay data has expired
255
261
before the user logs in.
256
262
263
+
257
264
Version 0.6.0
258
265
---------------------------------------------------------------------------
259
266
@@ -308,6 +315,7 @@ Other changes:
308
315
309
316
* Some code cleanups.
310
317
318
+
311
319
Version 0.5.0
312
320
---------------------------------------------------------------------------
313
321
@@ -332,6 +340,7 @@ Version 0.5.0
332
340
333
341
* Several cleanups in the code that starts authentication.
334
342
343
+
335
344
Version 0.4.0
336
345
---------------------------------------------------------------------------
337
346
@@ -355,6 +364,7 @@ Version 0.4.0
355
364
356
365
* Several bugfixes.
357
366
367
+
358
368
Version 0.3.0
359
369
---------------------------------------------------------------------------
360
370
@@ -366,25 +376,29 @@ Version 0.3.0
366
376
367
377
* Various bugfixes.
368
378
379
+
369
380
Version 0.2.7
370
381
---------------------------------------------------------------------------
371
382
372
383
* Optionaly save the remote IdP entityId in the environment
373
384
374
385
* Shibboleth 2 interoperability
375
386
387
+
376
388
Version 0.2.6
377
389
---------------------------------------------------------------------------
378
390
379
391
* Fix XSS/DOS vulnerability in repost handler.
380
392
393
+
381
394
Version 0.2.5
382
395
---------------------------------------------------------------------------
383
396
384
397
* Replay POST requests after been sent to the IdP
385
398
386
399
* Fix HTTP response splitting vulnerability.
387
400
401
+
388
402
Version 0.2.4
389
403
---------------------------------------------------------------------------
390
404
@@ -393,24 +407,28 @@ Version 0.2.4
393
407
* Mark session as disabled as soon as logout starts, in case the IdP
394
408
doesn't respond.
395
409
410
+
396
411
Version 0.2.3
397
412
---------------------------------------------------------------------------
398
413
399
414
* Bugfix for session lifetime. Take the session lifetime from the
400
415
SessionNotOnOrAfter attribute if it is present.
401
416
417
+
402
418
Version 0.2.2
403
419
---------------------------------------------------------------------------
404
420
405
421
* Improve metadata autogeneration: cleanup certificate, allow Organizarion
406
422
element data to be supplied from Apache configuration
407
423
424
+
408
425
Version 0.2.1
409
426
---------------------------------------------------------------------------
410
427
411
428
* Make SAML authentication assertion and Lasso session available in the
412
429
environment.
413
430
431
+
414
432
Version 0.2.0
415
433
---------------------------------------------------------------------------
416
434
0 commit comments