nginx-module-shibboleth (1.28.3+2.0.2-1~resolute.1) resolute; urgency=medium

  * d/p/abi-sync-request-port-field.patch: add. Build this dynamic module
    against an nginx source whose ngx_http_request_t matches the nginx
    binary package (>= 1.28.3-2ubuntu1.x), which adds an "in_port_t port;"
    field via backport-request_port_and_is_request_port.patch. Without
    this the module's view of the struct is offset by one field, so the
    "header_only" bitfield (and others) land at the wrong location at run
    time. For nginx-module-shibboleth this caused the FastCGI authorizer
    subrequest body to leak ahead of the 302 redirect, breaking protected
    pages with "Received HTTP/0.9 when not allowed". ABI mismatch with
    nginx 1.28.3-2ubuntu1.4.

 -- Technology Consulting Group Repostiory Key <tcg@office365stanford.onmicrosoft.com>  Wed, 10 Jun 2026 17:20:30 -0700

nginx-module-shibboleth (1.28.3+2.0.2-1~resolute) resolute; urgency=low

  * initial release of shibboleth module for nginx

 -- Technology Consulting Group Repostiory Key <tcg@office365stanford.onmicrosoft.com>  Tue,  9 Jun 2026 20:47:23 -0700

