--- wordpress-shibboleth-1.4.orig/debian/changelog
+++ wordpress-shibboleth-1.4/debian/changelog
@@ -0,0 +1,32 @@
+wordpress-shibboleth (1.4-2+deb8u1build0.14.04.2) trusty-security; urgency=medium
+
+  * fake sync from Debian
+
+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 06 Oct 2017 14:17:50 -0400
+
+wordpress-shibboleth (1.4-2+deb8u1) jessie-security; urgency=high
+
+  * [CVE-2017-14313]: Fix XSS in login form (Closes: #874416)
+
+ -- Dominic Hargreaves <dom@earth.li>  Thu, 14 Sep 2017 11:39:51 +0100
+
+wordpress-shibboleth (1.4-2) unstable; urgency=low
+
+  * Add debian/watch file
+
+ -- Dominic Hargreaves <dom@earth.li>  Sun, 30 Jan 2011 16:22:45 +0000
+
+wordpress-shibboleth (1.4-1) unstable; urgency=low
+
+  * New upstream release
+  * Relax dependency on wordpress version to 2.8, as stated in upstream
+    readme.txt
+
+ -- Dominic Hargreaves <dom@earth.li>  Wed, 15 Sep 2010 16:58:08 +0100
+
+wordpress-shibboleth (1.3-1) unstable; urgency=low
+
+  * Initial release based on wordpress-openid package (Closes: #590852)
+  * Include bugfix for <http://wordpress.org/support/topic/shibboleth-plugin-does-not-hold-managed-settings>
+
+ -- Dominic Hargreaves <dom@earth.li>  Mon, 09 Aug 2010 16:17:07 +0100
--- wordpress-shibboleth-1.4.orig/debian/compat
+++ wordpress-shibboleth-1.4/debian/compat
@@ -0,0 +1 @@
+5
--- wordpress-shibboleth-1.4.orig/debian/control
+++ wordpress-shibboleth-1.4/debian/control
@@ -0,0 +1,33 @@
+Source: wordpress-shibboleth
+Section: php
+Priority: optional
+Maintainer: Dominic Hargreaves <dom@earth.li>
+Build-Depends: debhelper (>= 6.0.7), cdbs
+Standards-Version: 3.9.1
+Homepage: http://wordpress.org/extend/plugins/shibboleth/
+Vcs-Browser: http://git.debian.org/?p=users/dom/wordpress-shibboleth.git
+Vcs-Git: git://git.debian.org/~dom/wordpress-shibboleth.git
+
+Package: wordpress-shibboleth
+Architecture: all
+Depends: ${shlibs:Depends}, ${misc:Depends}, wordpress (>= 2.8), libapache2-mod-shib2
+Description: Shibboleth plugin for WordPress
+ This plugin is designed to support integrating your WordPress blog into
+ your existing identity management infrastructure using a Shibboleth
+ Service Provider.
+ .
+ WordPress can be configured so that all standard login requests will be
+ sent to your configured Shibboleth Identity Provider or Discovery Service.
+ Upon successful authentication, a new WordPress account will be
+ automatically provisioned for the user if one does not already exist.
+ User attributes (username, first name, last name, display name, nickname,
+ and email address) can be synchronized with your enterprise's system of
+ record each time the user logs into WordPress.
+ .
+ Finally, the user's role within WordPress can be automatically set (and
+ continually updated) based on any attribute Shibboleth provides. For
+ example, you may decide to give users with an eduPersonAffiliation value
+ of faculty the WordPress role of editor, while the eduPersonAffiliation
+ value of student maps to the WordPress role contributor. Or you may choose
+ to limit access to WordPress altogether using a special
+ eduPersonEntitlement value.
--- wordpress-shibboleth-1.4.orig/debian/copyright
+++ wordpress-shibboleth-1.4/debian/copyright
@@ -0,0 +1,27 @@
+Format-Specification:
+    http://svn.debian.org/wsvn/dep/web/deps/dep5.mdwn?op=file&rev=59
+Name: Wordpress Shibboleth plugin
+Maintainer: Will Norris <http://willnorris.com/>
+Source: http://wordpress.org/extend/plugins/shibboleth/
+
+Files: *
+Copyright: 2009 Will Norris
+License: Apache-2.0
+
+Files: debian/*
+Copyright: 2010 Alexander GQ Gerasiov <gq@debian.org> (based on wordpress-openid); University of Oxford (Dominic Hargraves)
+License: GPL-2+
+
+License: Apache-2.0
+On Debian systems the full text of the Apache 2.0 License can be found in the
+  `/usr/share/common-licenses/Apache-2.0' file.
+
+License: GPL-2+
+ This program is free software; you can redistribute it and/or modify it under
+ the terms of the GNU General Public  License as published by the Free Software
+ Foundation; either version 2 of the License, or (at your option) any later
+ version.
+ .
+ On Debian GNU/Linux systems, the complete text of the GNU General Public
+ License version 2 can be found in `/usr/share/common-licenses/GPL-2'
+
--- wordpress-shibboleth-1.4.orig/debian/docs
+++ wordpress-shibboleth-1.4/debian/docs
@@ -0,0 +1 @@
+readme.txt
--- wordpress-shibboleth-1.4.orig/debian/install
+++ wordpress-shibboleth-1.4/debian/install
@@ -0,0 +1,3 @@
+*.php           usr/share/wordpress/wp-content/plugins/shibboleth
+icon.png        usr/share/wordpress/wp-content/plugins/shibboleth
+localization    usr/share/wordpress/wp-content/plugins/shibboleth
--- wordpress-shibboleth-1.4.orig/debian/rules
+++ wordpress-shibboleth-1.4/debian/rules
@@ -0,0 +1,3 @@
+#!/usr/bin/make -f
+include /usr/share/cdbs/1/rules/debhelper.mk
+
--- wordpress-shibboleth-1.4.orig/debian/watch
+++ wordpress-shibboleth-1.4/debian/watch
@@ -0,0 +1,3 @@
+version=3
+http://wordpress.org/extend/plugins/shibboleth/ \
+http://downloads.wordpress.org/plugin/shibboleth.([\d\.]*).zip
--- wordpress-shibboleth-1.4.orig/shibboleth.php
+++ wordpress-shibboleth-1.4/shibboleth.php
@@ -439,7 +439,7 @@
  */
 function shibboleth_login_form() {
 	$login_url = add_query_arg('action', 'shibboleth');
-	echo '<p id="shibboleth_login"><a href="' . $login_url . '">' . __('Login with Shibboleth', 'shibboleth') . '</a></p>';
+	echo '<p id="shibboleth_login"><a href="' . esc_url($login_url) . '">' . __('Login with Shibboleth', 'shibboleth') . '</a></p>';
 }
 add_action('login_form', 'shibboleth_login_form');