You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/simplesamlphp-changelog.md
+53-1Lines changed: 53 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,9 +6,61 @@ SimpleSAMLphp changelog
6
6
This document lists the changes between versions of SimpleSAMLphp.
7
7
See the upgrade notes for specific information about upgrading.
8
8
9
+
## Version 1.14.12
10
+
11
+
Released 2017-03-30
12
+
13
+
* Resolved a security issue in the authcrypt module (Htpasswd authentication source) and in SimpleSAMLphp's session validation. See [SSPSA 201703-01](https://simplesamlphp.org/security/201703-01).
14
+
* Resolved a security issue with IV generation in the `SimpleSAML\Utils\Crypto::_aesEncrypt()` method. See [SSPSA 201703-02](https://simplesamlphp.org/security/201703-02).
15
+
* Fixed an issue with the authfacebook module, broken after a change in Facebook's API.
16
+
* Fixed an issue in the discopower module that ignored the `hide.from.discovery` metadata option.
17
+
* Fixed an issue with trusted URLs validation that prevented a URL from being accepted if a standard port was explicitly included but not specified in the configuration.
18
+
* Fixed an issue that prevented detecting a Memcache server being down when fetching Memcache statistics.
19
+
* Fixed an issue with operating system detection that made SimpleSAMLphp identify OSX as Windows.
20
+
21
+
## Version 1.14.11
22
+
23
+
Released 2016-12-12
24
+
25
+
* Resolved a security issue involving signature validation of SAML 1.1 messages. See [SSPSA 201612-02](https://simplesamlphp.org/security/201612-02).
26
+
* Fixed an issue when the user identifier used to generate a persistent NameID was missing due to a misconfiguration, causing SimpleSAMLphp to generate the nameID based on the null data type.
27
+
* Fixed an issue when persistent NameIDs were generated out of attributes with empty strings or multiple values.
28
+
* Fixed issue #530. An empty SubjectConfirmation element was causing SimpleSAMLphp to crash. On the other hand, invalid SubjectConfirmation elements were ignored in PHP 7.0.
29
+
30
+
## Version 1.14.10
31
+
32
+
Released 2016-12-02
33
+
34
+
* Resolved a security issue involving signature validation. See [SSPSA 201612-01](https://simplesamlphp.org/security/201612-01).
35
+
* Fixed issue #517. A misconfigured session when acting as a service provider was leading to a PHP fatal error.
36
+
* Fixed issue #519. Prevent persistent NameIDs from being generated from empty strings.
37
+
* Fixed issue #520. It was impossible to verify Apache's custom MD5 passwords when using the Htpasswd authentication source.
38
+
* Fixed issue #523. Avoid problems caused by different line-ending strategies in the project files.
39
+
* Other minor fixes and enhancements.
40
+
41
+
## Version 1.14.9
42
+
43
+
Released 2016-11-10
44
+
45
+
* Fixed an issue that resulted in PHP 7 errors being masked.
46
+
* Fixed the smartattributes:SmartName authentication processing filter.
47
+
* Fixed issue #500. When parsing metadata, two 'attributes.required' options were generated.
48
+
* Fixed the list of requirements in composer, the documentation, and the configuration page.
49
+
* Fixed issue #479. There were several minor issues with XHTML compliance.
50
+
* Other minor fixes.
51
+
52
+
## Version 1.14.8
53
+
54
+
Released 2016-08-23
55
+
56
+
* Fixed an issue in AuthMemCookie causing it to crash when an attribute received contains XML as its value.
57
+
* Fixed an issue in AuthMemCookie that made it impossible to set its own cookie.
58
+
* Fixed an issue when acting as a proxy and receiving attributes that contain XML as their values.
59
+
* Fixed an issue that led to incorrect URL guessing when a script is invoked with a URI that doesn't include its name.
60
+
9
61
## Version 1.14.7
10
62
11
-
Released TBD
63
+
Released 2016-08-01
12
64
13
65
* Fixed issue #424. Attributes containing XML as their values (like eduPersonTargetedID) were empty.
0 commit comments