From 55083289ec191d8d24be998f7d3711d69de51fa2 Mon Sep 17 00:00:00 2001 From: Sixto Martin Date: Wed, 11 Jan 2017 14:00:11 +0100 Subject: [PATCH] Release 1.2.2 --- README.md | 2 +- changelog.md | 8 ++++++++ setup.py | 4 ++-- 3 files changed, 11 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index e7c5e057..d6c1e9c2 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ This version supports Python3, There is a separate version that only support Pyt #### Warning #### -Update python3-saml to 1.2.1 that patch 1.2.0 (that had a bug on signature validation process (when using wantAssertionsSigned and wantMessagesSigned). [CVE-2016-1000251](https://github.com/distributedweaknessfiling/DWF-Database-Artifacts/blob/master/DWF/2016/1000251/CVE-2016-1000251.json) +Update python3-saml to >= 1.2.1, 1.2.0 had a bug on signature validation process (when using wantAssertionsSigned and wantMessagesSigned). [CVE-2016-1000251](https://github.com/distributedweaknessfiling/DWF-Database-Artifacts/blob/master/DWF/2016/1000251/CVE-2016-1000251.json) 1.2.0 version includes a security patch that contains extra validations that will prevent signature wrapping attacks. diff --git a/changelog.md b/changelog.md index 112dd435..6ec3b9ea 100644 --- a/changelog.md +++ b/changelog.md @@ -1,5 +1,13 @@ # python3-saml changelog +### 1.2.2 (January 11, 2017) + * [#37](https://github.com/onelogin/python3-saml/pull/37) Add option to raise response validation exceptions + * [#42](https://github.com/onelogin/python3-saml/pull/42) Optionally raise detailed exceptions vs. returning False. Implement a more specific exception class for handling some validation errors. Improve/Fix tests. Add support for retrieving the last ID of the generated AuthNRequest / LogoutRequest. Add hooks to retrieve last-sent and last-received requests and responses + * Improved inResponse validation on Responses + * Add the ability to extract the specific certificate from IdP metadata when several defined + * Fix Invalid True attribute value in Metadata XML + * [#35](https://github.com/onelogin/python3-saml/pull/35) Fix typos and json sample code in documentation + ### 1.2.1 (October 18, 2016) * [#30](https://github.com/onelogin/python3-saml/pull/30) Bug on signature checks diff --git a/setup.py b/setup.py index 6dfcf7bd..57be437a 100644 --- a/setup.py +++ b/setup.py @@ -9,10 +9,10 @@ setup( name='python3-saml', - version='1.2.1', + version='1.2.2', description='Onelogin Python Toolkit. Add SAML support to your Python software using this library', classifiers=[ - 'Development Status :: 4 - Beta', + 'Development Status :: 5 - Production/Stable', 'Intended Audience :: Developers', 'Intended Audience :: System Administrators', 'Operating System :: OS Independent',