Accepted python-pysaml2 4.5.0-7 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 07 Feb 2020 09:12:46 +0100
Source: python-pysaml2
Architecture: source
Version: 4.5.0-7
Distribution: unstable
Urgency: high
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 949227 949322
Changes:
python-pysaml2 (4.5.0-7) unstable; urgency=high
.
[ Ondřej Nový ]
* Run wrap-and-sort -bastk.
* Use 'python3 -m sphinx' instead of sphinx-build for building docs.
.
[ Thomas Goirand ]
* CVE-2020-5390: does not check that the signature in a SAML document is
enveloped and thus signature wrapping is effective, i.e., it is affected by
XML Signature Wrapping (XSW). Applied upstream patch: Fix XML Signature
Wrapping (XSW) vulnerabilities (Closes: #949322).
* Remove a test file that will fail past 2020-11-28 (Closes: #949227).
Checksums-Sha1:
37540f30f18bbe0ffe21d6be9f9b5c8e75b33b36 2519 python-pysaml2_4.5.0-7.dsc
1de54c080086eaa970ad07e91b2840d4c3bef33b 15004 python-pysaml2_4.5.0-7.debian.tar.xz
108c5a3309be12bd0ced0d37c3dc62293fb71e4e 8671 python-pysaml2_4.5.0-7_amd64.buildinfo
Checksums-Sha256:
35a6d4b939a06a45f4a74d896ef2497b0e8e57e196884a79efe097907c3213b8 2519 python-pysaml2_4.5.0-7.dsc
b3551f8c5bcfd2d4600cf4edda06e0c48d09a8fcf4ff47b0b72b060bda1b9f8a 15004 python-pysaml2_4.5.0-7.debian.tar.xz
4f8871744da45038eb5bae4dd39781fc55785165dae15d1e3be6b0db39ccfa48 8671 python-pysaml2_4.5.0-7_amd64.buildinfo
Files:
bf519d2d7ec2d9674240538af9503ce3 2519 python optional python-pysaml2_4.5.0-7.dsc
a159ce99f129fa818cbfd582f4fd0879 15004 python optional python-pysaml2_4.5.0-7.debian.tar.xz
7456418e96b9ef3f19f85a67b8fa6483 8671 python optional python-pysaml2_4.5.0-7_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCAAdFiEEoLGp81CJVhMOekJc1BatFaxrQ/4FAl49HvsACgkQ1BatFaxr
Q/52rRAAn0u/X7xbBHInRlrI3VBdoMmNJTRLeDzTVIhX138shVS9KvxKqSo/NBbR
WKJOJdw0gGj0ffTQKd1hCEOZ0BzaZDMEy+Q9WsZTialuR5BNcxETF8cWhX069QU+
ywAtl3yaQH+mdNr7Q2uYaeSTuF0FOXVxDv4lmhrDybxm3mspRpklZgCZXqCVwIhY
QJMiuF86y3HE66wQmctSWyP+Hj/BmVwHDjiB2P7Qh3gV9SJWhLWi/IB4hq3yEvuX
F4iWvDPbFd3eI9mlICHzLiOd5Yf6uQ8i/B7Jf1l+G5EsDXbeuIP1oCC46DuOUIJe
91mSpUmJvXpX4V7Hmy4Qkmj/cHlaA5WHe/RgT4TsrS6PFwu7PFT+8/ANqHn8L+wz
zmx0hQrDH3/1nC5Z/gkJhPzS8svyyAAB5pHAx01V/OJmWae6MDl1lyQCP6W+HK3f
Je47OBNui3hVvNH5KwvrNo62bBIbH517/fyIDCMjXu5L+2u1yCsw3HMPsQJUji00
rqMfbgcsP+1rNL7uZi3piB4gYEB8acwUoWznAfb3dxKHIdy8FSmqDQXuoCKVvDQw
hx2E6FLtTi68ixau6mEGZiaYyukiqaxMIA4dGo/4LtUZxLG32QxiW6KWGhx+UadF
0118n/gFXNi2I846VwpX0rbga5IS8GEFVAMsAMAO6vJymFx67vM=
=grLH
-----END PGP SIGNATURE-----