File python-pysaml2.changes of Package python-pysaml2

Overview Repositories Revisions Requests Users Attributes Meta

File python-pysaml2.changes of Package python-pysaml2 (Revision a1b12a86802ed88ac6ed250a7a7e0dee)

Currently displaying revision a1b12a86802ed88ac6ed250a7a7e0dee , Show latest

-------------------------------------------------------------------
Wed Jan 27 06:39:32 UTC 2021 - Jan Zerebecki <jzerebecki@suse.com>

- Fix CVE-2021-21238, bsc#1181277 with
  0002-Strengthen-XSW-tests.patch ,
  0003-Fix-the-parser-to-not-break-on-ePTID-AttributeValues.patch ,
  0004-Add-xsd-schemas.patch ,
  0005-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch .
  This adds a dependency on python-xmlschema, which depends on
  python-elementpath, thus both need to be added for this to work.
  The used python-xmlschema needs to support the sandbox argument
  which was added in 1.2.0 and refined in 1.2.1, but that version
  doesn't support python2, so a patched version that does both is
  needed.
  Add 0007-replace-reportlib_resources-useage-with-inspect.patch to
  not add a dependency on reportlib_resources.
. Fix CVE-2021-21239, bsc#1181278 with
  0006-Fix-CVE-2021-21239-Restrict-the-key-data-that-xmlsec.patch

-------------------------------------------------------------------
Fri Nov 13 18:16:12 UTC 2020 - Guang Yee <gyee@suse.com>

- Add 0001-Fix-XML-Signature-Wrapping-XSW-vulnerabilities.patch
  (CVE-2020-5390, bsc#1160851)

-------------------------------------------------------------------
Tue Oct  9 15:38:33 UTC 2018 - Colleen Murphy <comurphy@suse.com>

- Replace python-pycryptodomex dep with python-cryptography
  - Dependency was swapped in afdf5b4

-------------------------------------------------------------------
Wed Nov 29 08:25:34 UTC 2017 - okurz@suse.com

- Add missing runtime dependency on 'defusedxml'
- Add obsolete suse_version special handling

-------------------------------------------------------------------
Mon Oct 30 22:27:36 UTC 2017 - michael@stroeder.com

- update to 4.5.0

-------------------------------------------------------------------
Mon Jun 19 08:57:42 UTC 2017 - okurz@suse.com

- Convert to singlespec

-------------------------------------------------------------------
Tue Nov 22 15:18:26 UTC 2016 - dmueller@suse.com

- fix requires

-------------------------------------------------------------------
Thu Nov 17 14:42:09 UTC 2016 - michael@stroeder.com

- update to 4.4.0
- added LICENSE.txt to docs

-------------------------------------------------------------------
Fri Feb 26 13:14:29 UTC 2016 - tbechtold@suse.com

- Require python-python-dateutil. package was renamed

-------------------------------------------------------------------
Tue Oct 13 21:31:03 UTC 2015 - dmueller@suse.com

- add pycrypto/pyOpenSSL dependency

-------------------------------------------------------------------
Tue Sep  1 07:17:52 UTC 2015 - tbechtold@suse.com

- Move python-repoze.who from Recommends to Requires. It's needed.

-------------------------------------------------------------------
Thu Jul 30 19:30:53 UTC 2015 - tbechtold@suse.com

- Add missing Requires

-------------------------------------------------------------------
Thu Jul 16 15:40:39 UTC 2015 - seife+obs@b1-systems.com

- fix build on non-SUSE distributions whose rpm does not know
  "Recommends"

-------------------------------------------------------------------
Wed Jun 10 08:48:46 UTC 2015 - dmueller@suse.com

- update to 2.4.0:
  * A couple of security fixes plus maintenance updates.

-------------------------------------------------------------------
Tue Oct 15 07:41:04 UTC 2013 - speilicke@suse.com

- Initial version

Places

File python-pysaml2.changes of Package python-pysaml2 (Revision a1b12a86802ed88ac6ed250a7a7e0dee)

Places