[ubuntu/disco-security] python-pysaml2 4.5.0+dfsg1-0ubuntu2.19.04.1 (Accepted)

[Leonidas S. Barbosa]

python-pysaml2 (4.5.0+dfsg1-0ubuntu2.19.04.1) disco-security; urgency=medium

  * SECURITY UPDATE: Signature in SAML doc not checked properly
    - debian/patches/CVE-2020-5390.patch: fix XML signature wrapping
      (XSW) in src/saml2/sigver.py, tests/saml2_response_xsw.xml,
      tests/test_xsw.py.
    - CVE-2020-5390
  * Fixing test_41_response
    - debian/patches/Fix-test-41-that-now-depend-on-acual-datetime.patch:
      Fix test that depended on actual datetime in tests/test_41_response.py.

Date: 2020-01-21 12:47:17.491789+00:00
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/python-pysaml2/4.5.0+dfsg1-0ubuntu2.19.04.1
-------------- next part --------------
Sorry, changesfile not available.