Re: CVS commit: pkgsrc

[Konrad Schroder <perseant%hhhh.org@localhost>]

On 7/16/20 8:12 AM, Leonardo Taccari wrote:

> Thanks for updating it!
>
> Can you please provide a summary of changes when updating packages?
> In that way readers of pkgsrc-changes@/MAINTAINERs have an idea of what
> to expect when updating and these also help pkgsrc-security and pkgsrc
> Releng teams.
>
>
> Thanks!

Sorry, here is the summary of changes.  Ideally I'd change the commit 
message(s) to incorporate it, but I don't seem to have the necessary 
privileges for that.

Version 3.1.0

Bug:
 * [SSPCPP-891] - Logout notifications are depending on access to SP 
session
 * [SSPCPP-887] - request from MDQ metadata provider does not include 
correct Accept header
 * [SSPCPP-886] - Access discoveryURL via RequestMap within handlers
 * [SSPCPP-882] - Empty entityID in shibboleth2.xml causes seg fault
 * [SSPCPP-879] - Auto-registered SessionInitiators not usable via 
requireSessionWith
 * [SSPCPP-874] - "Specfile has unnecessary ""fix-up"" logic that 
should be removed"
 * [SSPCPP-872] - BOOST assert with misconfigured ExternalAuth
 * [SSPCPP-861] - Improve the error message 'Blocked unacceptable 
redirect location'

Improvement:
 * [SSPCPP-892] - Sync up filter schema with IdP
 * [SSPCPP-889] - keygen.sh implicitly relies on hostname command
 * [SSPCPP-884] - Extract registrationAuthority and pass it to an 
application as an attribute
 * [SSPCPP-881] - Replace GetVersionEx in status handler
 * [SSPCPP-865] - Attribute Resolver handler should propagate 
StatusCode to caller
 * [SSPCPP-863] - default shibd.logger does not set 
log4j.category.XMLTooling.XMLObjectBuilder=INFO
 * [SSPCPP-836] - Allow more flexibility in session address check

Task:
 * [SSPCPP-875] - Xerces 3.2.3 release
 * [SSPCPP-871] - Remove support for Server2008 and Server2008R2
 * [SSPCPP-870] - Build Installer for symbol files

Version 3.0.4

Bug:
 * [SSPCPP-856] - Non-default handler URL fails with IIS 7 module
 * [SSPCPP-848] - Can't change from default binding template
 * [SSPCPP-847] - Macport build fails with linker error

Improvement:
 * [SSPCPP-851] - Limit the number of _shibpost cookies

Task:
 * [SSPCPP-869] - CentOS 8 packaging

Version 3.0.3

Bug:
 * [SSPCPP-845] - Crash on malformed DateTime strings
 * [SSPCPP-840] - Warn on duplicated handler locations
 * [SSPCPP-834] - Shibboleth 3 RPM fails to build with FastCGI support
 * [SSPCPP-833] - seckeygen.sh not executable

Improvement:
 * [SSPCPP-739] - Attribute Resolver handler should propagate IdP 
errors to caller

Version 3.0.2

Bug:
 * [SSPCPP-832] - Upgrade to 3.0.1 comments out persistent-id in an 
unmodified attribute-map.xml
 * [SSPCPP-831] - Review code for PropertySet options affected by 
namespace change
 * [SSPCPP-829] - fastcgi support doesn't build
 * [SSPCPP-828] - .NET Handler paths reported incorrectly
 * [SSPCPP-811] - targeted-id could now be removed from 
attribute-policy.xml

Version 3.0.1

Bug:
 * [SSPCPP-826] - acl= in Admin LogoutInitiator takes no effect
 * [SSPCPP-825] - Multiple <ApplicationOverride> results 
shibsp::ConfigurationException*
 * [SSPCPP-824] - Typo in shibboleth2.xml and shibboleth2.xml.dist

Improvement:
 * [SSPCPP-822] - LogoutRequest handling should take Reason attribute 
into account

Task:
 * [SSPCPP-827] - Rebuild libshibresolver for 3.0 library set

Version 3.0.0

Bug:
 * [SSPCPP-819] - XML MetadataProvider file= not recognized
 * [SSPCPP-818] - dist\Native.logger not updated
 * [SSPCPP-817] - Stale reference to old batch files in Windows 
installer script
 * [SSPCPP-815] - Shidb_default announces itself wrongly after update
 * [SSPCPP-807] - Reinstall Fails if IIS still installed
 * [SSPCPP-802] - V3 Upgrade - need to rebuild the catalog.
 * [SSPCPP-799] - Listener remoting map needs to be synchronized
 * [SSPCPP-797] - Resolvers with exceptionId option don't report it as 
an attribute ID to clear.
 * [SSPCPP-792] - Artifact responses are invalid
 * [SSPCPP-786] - metagen references obsolete DS handler
 * [SSPCPP-774] - Missing nullptr check in implicit std::string 
construction in RemotedHandler::unwrap
 * [SSPCPP-748] - IIS7 filter: Investigate RoleManager support for IIS
 * [SSPCPP-730] - POST form preservation causes XMLTooling.ParserPool 
ERROR when last part of POST content is not ASCII 7
 * [SSPCPP-729] - keygen.bat breaks when specifying an entityID on 
recent Windows versions
 * [SSPCPP-720] - default value of <Errors> metadata attribute not used
 * [SSPCPP-712] - Shibd leaks file handles after rotating logs and 
touching shibboleth2.xml
 * [SSPCPP-708] - Default cipherSuites setting breaks SOAP on RedHat
 * [SSPCPP-706] - Segfault on multiple root category definitions 
introduced in log4shib 1.0.6
 * [SSPCPP-650] - Should Windows Installer set retricted permissions on 
the \opt\ tree

Improvement:
 * [SSPCPP-816] - Windows: Try to suppress the Change... on the repair 
dialog
 * [SSPCPP-812] - Add additional SCHAC attributes
 * [SSPCPP-810] - Add Microsoft schemas for validation of ADFS metadata
 * [SSPCPP-809] - Freshen default audit log format
 * [SSPCPP-805] - Change default signing algorithms to SHA-256
 * [SSPCPP-795] - Better content for sample syslog-based logger 
configuration
 * [SSPCPP-793] - auto_ptr cleanup
 * [SSPCPP-776] - Add POST preservation to new IIS native module
 * [SSPCPP-765] - Improvements to new Windows build scripts
 * [SSPCPP-739] - Attribute Resolver handler should propagate IdP 
errors to caller
 * [SSPCPP-733] - Dynamic metadata should not cache negative results
 * [SSPCPP-731] - orphaned DiscoveryFeed cache files accumulate
 * [SSPCPP-715] - enable fetch of dynamic metadata using compression
 * [SSPCPP-676] - Support unified systemd library in autoconf check
 * [SSPCPP-640] - extend the SessionInitiator URL syntax
 * [SSPCPP-613] - "make initial ; in cookieProps optional"
 * [SSPCPP-593] - Unable to clear/overwrite response headers with 
ShibTargetApache::setResponseHeader

Task:
 * [SSPCPP-800] - SPV3.0 Preparation for Release
 * [SSPCPP-794] - Change default logging for inproc half of SP
 * [SSPCPP-791] - Rationalize use of  XMLHelper::encode
 * [SSPCPP-785] - Modify Subrevision on zlib (and other relevevant 
DLLS) to take account of new build
 * [SSPCPP-782] - Strip debug build from the installers
 * [SSPCPP-778] - Fork configuration and address backward compatibility
 * [SSPCPP-773] - V3 Documentation
 * [SSPCPP-768] - Flip defaults in configuration
 * [SSPCPP-762] - Update libshibresolver for 3.0 stack
 * [SSPCPP-758] - Need to uniquify OpenSSL & Curl Dll name
 * [SSPCPP-756] - Bring Dynamic Metadata Provider up to functional 
equivalence to IdP one
 * [SSPCPP-754] - Look at 32/64 bit interop between shibd and the 
webserver plugins
 * [SSPCPP-752] -  Resuscitate NSAPI support on Windows
 * [SSPCPP-750] - Provide helper function to convert XMLCh into PCWSTR
 * [SSPCPP-744] - Try to centralize versions for DLLs
 * [SSPCPP-743] - Add Versioning information to messages.dll
 * [SSPCPP-736] - Review: IIS7 plugin Spoofheaders needs work
 * [SSPCPP-689] - Move Windows build up to latest compilers

--
Konrad Schroder
perseant%hhhh.org@localhost