Skip to content

Commit

Permalink
shibboleth-sp: Update to 3.4.1
Browse files Browse the repository at this point in the history
A patch release of the Service Provider, V3.4.1, is now available. This
release fixes a couple of small bugs and adds a warning requested by one
of our member organizations in the absence of the redirectLimit setting,
which leads to SPs being abused as open redirectors.

Notably, this release includes an update to the xmltooling library that
hardens the code base against the sorts of attacks reported against the
IdP in the recent advisory. The SP is, as far as can be determined, not
impacted directly by that vulnerability, but this is a precautionary
change.

Release notes:	https://shibboleth.atlassian.net/wiki/spaces/SP3/pages/2065335693/ReleaseNotes
  • Loading branch information
Palle Girgensohn authored and Palle Girgensohn committed Jan 11, 2023
1 parent be21db7 commit a9e7159
Show file tree
Hide file tree
Showing 6 changed files with 13 additions and 13 deletions.
4 changes: 2 additions & 2 deletions devel/xmltooling/Makefile
@@ -1,7 +1,7 @@
PORTNAME= xmltooling
PORTVERSION= 3.2.2
PORTVERSION= 3.2.3
CATEGORIES= devel security
MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/3.2.1/
MASTER_SITES= http://shibboleth.net/downloads/c++-opensaml/latest/

MAINTAINER= girgen@FreeBSD.org
COMMENT= Low level XML support for SAML
Expand Down
6 changes: 3 additions & 3 deletions devel/xmltooling/distinfo
@@ -1,3 +1,3 @@
TIMESTAMP = 1667482615
SHA256 (xmltooling-3.2.2.tar.bz2) = d31bebd5f783464c541f9bca8656a8730e1de8574ff77e92c72aae3dc8ee4174
SIZE (xmltooling-3.2.2.tar.bz2) = 618792
TIMESTAMP = 1673425920
SHA256 (xmltooling-3.2.3.tar.bz2) = 95b8296ffb1facd86eaa9f24d4a895a7c55a3cd838450b4d20bc1651fdf45132
SIZE (xmltooling-3.2.3.tar.bz2) = 620767
4 changes: 2 additions & 2 deletions devel/xmltooling/pkg-plist
Expand Up @@ -87,10 +87,10 @@ include/xmltooling/validation/ValidatorSuite.h
include/xmltooling/version.h
lib/libxmltooling-lite.so
lib/libxmltooling-lite.so.10
lib/libxmltooling-lite.so.10.0.2
lib/libxmltooling-lite.so.10.0.3
lib/libxmltooling.so
lib/libxmltooling.so.10
lib/libxmltooling.so.10.0.2
lib/libxmltooling.so.10.0.3
libdata/pkgconfig/xmltooling-lite.pc
libdata/pkgconfig/xmltooling.pc
share/xml/xmltooling/catalog.xml
Expand Down
2 changes: 1 addition & 1 deletion security/shibboleth-sp/Makefile
@@ -1,5 +1,5 @@
PORTNAME= shibboleth-sp
PORTVERSION= 3.4.0
PORTVERSION= 3.4.1
CATEGORIES= security www
MASTER_SITES= http://shibboleth.net/downloads/service-provider/${PORTVERSION}/

Expand Down
6 changes: 3 additions & 3 deletions security/shibboleth-sp/distinfo
@@ -1,3 +1,3 @@
TIMESTAMP = 1667481817
SHA256 (shibboleth-sp-3.4.0.tar.bz2) = e7994be1105bc8683949fd11030a685fffc64cd6fa6d3e80c41bd078b05d5909
SIZE (shibboleth-sp-3.4.0.tar.bz2) = 830634
TIMESTAMP = 1673426052
SHA256 (shibboleth-sp-3.4.1.tar.bz2) = bffe3e62e46d86cc75db1093b77fa1456b30da7c930a13708afa0139c8a8acc1
SIZE (shibboleth-sp-3.4.1.tar.bz2) = 830667
4 changes: 2 additions & 2 deletions security/shibboleth-sp/pkg-plist
Expand Up @@ -92,7 +92,7 @@ include/shibsp/util/TemplateParameters.h
include/shibsp/version.h
lib/libshibsp.so
lib/libshibsp.so.11
lib/libshibsp.so.11.0.0
lib/libshibsp.so.11.0.1
lib/shibboleth/adfs.so
lib/shibboleth/adfs-lite.so
@comment %%MEMCACHED%%lib/shibboleth/memcache-store.so
Expand All @@ -104,7 +104,7 @@ lib/shibboleth/plugins.so
%%FASTCGI%%lib/shibboleth/shibresponder
lib/libshibsp-lite.so
lib/libshibsp-lite.so.11
lib/libshibsp-lite.so.11.0.0
lib/libshibsp-lite.so.11.0.1
libdata/pkgconfig/shibsp-lite.pc
libdata/pkgconfig/shibsp.pc
sbin/shibd
Expand Down

0 comments on commit a9e7159

Please sign in to comment.