File python-pysaml2.changes of Package python-pysaml2
-------------------------------------------------------------------
Fri Mar 5 11:10:38 UTC 2021 - Johannes Grassler <johannes.grassler@suse.com>
- Fix patches (SOC-11453)
* 0005-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch
- rename saml2.xml to saml2.samlxml to avoid overriding
the xml module in the system module path
- add missing __init__.py files
- add missing saml2/data package to setup.py
* 0007-Make-previous-commits-python2-compatible.patch so as not to
- Adjust to saml2.xml to saml2.samlxml changes
- Fix a few more syntax errors and Python2-isms.
-------------------------------------------------------------------
Wed Jan 27 06:39:32 UTC 2021 - Jan Zerebecki <jzerebecki@suse.com>
- Fix CVE-2021-21238, bsc#1181277 with
0002-Strengthen-XSW-tests.patch ,
0003-Fix-the-parser-to-not-break-on-ePTID-AttributeValues.patch ,
0004-Add-xsd-schemas.patch ,
0005-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch .
This adds a dependency on python-xmlschema, which depends on
python-elementpath, thus both need to be added for this to work.
The used python-xmlschema needs to support the sandbox argument
which was added in 1.2.0 and refined in 1.2.1, but that version
doesn't support python2, so a patched version that does both is
needed.
Add 0007-Make-previous-commits-python2-compatible.patch to
not add a dependency on reportlib_resources and make other
changes python2 compatible.
. Fix CVE-2021-21239, bsc#1181278 with
0006-Fix-CVE-2021-21239-Restrict-the-key-data-that-xmlsec.patch
-------------------------------------------------------------------
Fri Nov 13 18:16:12 UTC 2020 - Guang Yee <gyee@suse.com>
- Add 0001-Fix-XML-Signature-Wrapping-XSW-vulnerabilities.patch
(CVE-2020-5390, bsc#1160851)
-------------------------------------------------------------------
Tue Oct 9 15:38:33 UTC 2018 - Colleen Murphy <comurphy@suse.com>
- Replace python-pycryptodomex dep with python-cryptography
- Dependency was swapped in afdf5b4
-------------------------------------------------------------------
Wed Nov 29 08:25:34 UTC 2017 - okurz@suse.com
- Add missing runtime dependency on 'defusedxml'
- Add obsolete suse_version special handling
-------------------------------------------------------------------
Mon Oct 30 22:27:36 UTC 2017 - michael@stroeder.com
- update to 4.5.0
-------------------------------------------------------------------
Mon Jun 19 08:57:42 UTC 2017 - okurz@suse.com
- Convert to singlespec
-------------------------------------------------------------------
Tue Nov 22 15:18:26 UTC 2016 - dmueller@suse.com
- fix requires
-------------------------------------------------------------------
Thu Nov 17 14:42:09 UTC 2016 - michael@stroeder.com
- update to 4.4.0
- added LICENSE.txt to docs
-------------------------------------------------------------------
Fri Feb 26 13:14:29 UTC 2016 - tbechtold@suse.com
- Require python-python-dateutil. package was renamed
-------------------------------------------------------------------
Tue Oct 13 21:31:03 UTC 2015 - dmueller@suse.com
- add pycrypto/pyOpenSSL dependency
-------------------------------------------------------------------
Tue Sep 1 07:17:52 UTC 2015 - tbechtold@suse.com
- Move python-repoze.who from Recommends to Requires. It's needed.
-------------------------------------------------------------------
Thu Jul 30 19:30:53 UTC 2015 - tbechtold@suse.com
- Add missing Requires
-------------------------------------------------------------------
Thu Jul 16 15:40:39 UTC 2015 - seife+obs@b1-systems.com
- fix build on non-SUSE distributions whose rpm does not know
"Recommends"
-------------------------------------------------------------------
Wed Jun 10 08:48:46 UTC 2015 - dmueller@suse.com
- update to 2.4.0:
* A couple of security fixes plus maintenance updates.
-------------------------------------------------------------------
Tue Oct 15 07:41:04 UTC 2013 - speilicke@suse.com
- Initial version
