changelogs/unreleased · 9191f538ba97f59d09c6ffbb747e4a34e30231ee · Forest Godfrey / gitlab-ce

Merge branch 'fix-shibboleth-auth-with-no-uid' into 'master' · d1afb845

authored Nov 16, 2016

fix shibboleth misconfigurations resulting in authentication bypass

This merge request fixes #22267 where a misconfigured Shibboleth `HTTP_UID` or `HTTP_EPPN` could result in users being logged into an account that did not belong to them.

See merge request !7428

d1afb845

Name	Last commit	Last update
..
.gitkeep		Loading commit data...
20968-add-setting-to-check-unresolved-discussion.yml		Loading commit data...
21076-deleted-merged-branches.yml		Loading commit data...
21664-incorrect-workhorse-version-number-displayed.yml		Loading commit data...
21992-disable-access-requests-by-default.yml		Loading commit data...
22307-pipeline-link-in-builds-view.yml		Loading commit data...
22588-todos-filter-shows-all-users.yml		Loading commit data...
22680-unlabel-limit-autocomplete-to-selected-items.yml		Loading commit data...
22699-group-permssion-background-migration.yml		Loading commit data...
22790-mention-autocomplete-avatar.yml		Loading commit data...
22947-fix_issues_atom_feed_url.yml		Loading commit data...
23036-replace-git-blame-spinach-tests-with-rspec-feature-tests.yml		Loading commit data...
23117-search-for-a-filename-in-a-project.yml		Loading commit data...
23584-triggering-builds-from-webhooks.yml		Loading commit data...
23731-add-param-to-user-api.yml		Loading commit data...
23824-activity-page-does-not-show-commits-comments.yml		Loading commit data...
23961-can-t-share-project-with-groups.yml		Loading commit data...
24038-fix-no-register-pane-if-ldap.yml		Loading commit data...
24048-dropdown-issue-with-devider.yml		Loading commit data...
24056-guest-sees-some-project-details-and-gets-404.yml		Loading commit data...
24059-round-robin-repository-storage.yml		Loading commit data...
24102-cannot-unselect-remove-source-branch-when-editing-merge-request.yml		Loading commit data...
24255-search-fix.yml		Loading commit data...
24279-issue-merge-request-sidebar-todo-button-style-improvement.yml		Loading commit data...
24369-remove-additional-padding.yml		Loading commit data...
24397-load-labels-on-mr-tabs.yml		Loading commit data...
24492-promise-polyfill.yml		Loading commit data...
adam-build-missing-services-when-necessary.yml		Loading commit data...
adam-fix-collapsed-diff-symlink-file-conversion.yml		Loading commit data...
add-api-label-id.yml		Loading commit data...
add-project-import-data-index.yml		Loading commit data...
always-show-download-button.yml		Loading commit data...
api-label-priorities.yml		Loading commit data...
api-return-400-if-post-systemhook-fails.yml		Loading commit data...
broken-link-frontend-dev-guide.yml		Loading commit data...
faster_project_search.yml		Loading commit data...
feature-api_owned_resource.yml		Loading commit data...
fix-404-on-network-when-entering-a-nonexistent-git-revision.yml		Loading commit data...
fix-cache-for-commit-status.yml		Loading commit data...
fix-error-when-invalid-branch-for-new-pipeline-used.yml		Loading commit data...
fix-help-page-links.yml		Loading commit data...
fix-invalid-filename-eslint.yml		Loading commit data...
fix-merge-request-screen-deleted-source-branch.yml		Loading commit data...
fix-search-input-padding.yml		Loading commit data...
fix-shibboleth-auth-with-no-uid.yml		Loading commit data...
fix-uncheckable-label-for-force_remove_source_branch.yml		Loading commit data...
fix_labels_api_adding_missing_parameter.yml		Loading commit data...
fix_navigation_bar_issuables_counters.yml		Loading commit data...
fix_saml_ldap_link.yml		Loading commit data...
forking-in-progress-title.yml		Loading commit data...
git-gc-improvements.yml		Loading commit data...
issue-13823.yml		Loading commit data...
issue-boards-counter-border-fix.yml		Loading commit data...
issue_20245.yml		Loading commit data...
issue_23032.yml		Loading commit data...
ldap_check_bind.yml		Loading commit data...
master-recursiveTree.yml		Loading commit data...
milestone-project-require.yml		Loading commit data...
new-note-worker-record-not-found-fix.yml		Loading commit data...
pipeline-notifications.yml		Loading commit data...
process-commits-using-sidekiq.yml		Loading commit data...
remove-heading-space-from-diff-content.yml		Loading commit data...
repository-name-emojis		Loading commit data...
rs-issue-24527.yml		Loading commit data...
setter-for-key.yml		Loading commit data...
sh-bump-omniauth-gitlab.yml		Loading commit data...
show-status-from-branch.yml		Loading commit data...
sidekiq-job-throttling.yml		Loading commit data...
sidekiq_default_retries.yml		Loading commit data...
stanhu-gitlab-ce-fix-error-500-with-mr-images.yml		Loading commit data...
upgrade-timeago.yml		Loading commit data...
use-separate-token-for-incoming-email.yml		Loading commit data...
user-dropdown-multiple-requests-fix.yml		Loading commit data...
user_filter_auth.yml		Loading commit data...