After being prompted by Jamie on IRC, I reexamined the differences
between the upstream commit and the supplied patch for the openid issue,
and the patch in the debdiff is missing the following chunk:

@@ -111,7 +111,7 @@ function openid_form_alter(&$form, $form_state, $form_id) {
       '#weight' => -1,
       '#description' => l(t('What is OpenID?'), 'http://openid.net/', 
array('external' => TRUE)),
     );
-    $form['openid.return_to'] = array('#type' => 'hidden', '#value' => 
url('openid/authenticate', array('absolute' => TRUE, 'query' => 
user_login_destination())));
+    $form['openid.return_to'] = array('#type' => 'hidden', '#value' => 
url('openid/authenticate', array('absolute' => TRUE, 'query' => 
drupal_get_destination())));
   }
   elseif ($form_id == 'user_register' && isset($_SESSION['openid']['values'])) 
{
     // We were unable to auto-register a new user. Prefill the registration

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/539056

Title:
  backport security fixes from 6.19 and 5.23

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to