diff --git a/avoid-too-large-dates.patch b/avoid-too-large-dates.patch deleted file mode 100644 index 4387cf9..0000000 --- a/avoid-too-large-dates.patch +++ /dev/null @@ -1,105 +0,0 @@ ---- a/tests/InCommon-metadata.xml -+++ b/tests/InCommon-metadata.xml -@@ -1,4 +1,4 @@ -- -+ - - - ---- a/tests/attribute_response.xml -+++ b/tests/attribute_response.xml -@@ -32,13 +32,13 @@ - Method="urn:oasis:names:tc:SAML:2.0:cm:bearer"> - - - - - - urn:mace:example.com:saml:roland:sp ---- a/tests/idp_example.xml -+++ b/tests/idp_example.xml -@@ -2,7 +2,7 @@ - -+ validUntil="2036-04-12T06:06:13Z"> - ---- a/tests/metadata.aaitest.xml -+++ b/tests/metadata.aaitest.xml -@@ -7,7 +7,7 @@ - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - ID="AAITest-20140205105921" - Name="urn:mace:switch.ch:aaitest" -- validUntil="2999-02-10T09:59:21Z" -+ validUntil="2036-02-10T09:59:21Z" - xsi:schemaLocation="urn:oasis:names:tc:SAML:2.0:metadata saml-schema-metadata-2.0.xsd urn:mace:shibboleth:metadata:1.0 shibboleth-metadata-1.0.xsd http://www.w3.org/2000/09/xmldsig# xmldsig-core-schema.xsd"> - - ---- a/tests/metadata.xml -+++ b/tests/metadata.xml -@@ -1,6 +1,6 @@ - - - - -- -+ - - - ---- a/tests/remote_data/InCommon-metadata-export.xml -+++ b/tests/remote_data/InCommon-metadata-export.xml -@@ -1,4 +1,4 @@ -- -+ - - - ---- a/tests/swamid-2.0.xml -+++ b/tests/swamid-2.0.xml -@@ -4,7 +4,7 @@ - This file was automatically generated - do not edit - - --> --wdokYz5tEa8aCh+fEPqytS/y9W8=Wsr/+VrII3wK5rAzQKmjSzflCIuIhQboSc6sIxQwWw3toALPfY5fBl1XHPKGFXxY -+wdokYz5tEa8aCh+fEPqytS/y9W8=Wsr/+VrII3wK5rAzQKmjSzflCIuIhQboSc6sIxQwWw3toALPfY5fBl1XHPKGFXxY - t6W7MxPjU1FKh4PdISeTgqYUwvrX2YDE7HxoYAZR5n5cZlogBZIR3dUwXAcJ75pX - tDUHpoqNyEJgoaeTiFhNBrfwGPlWNb0RstfM+iMIpdNTlSFHvuHMxkJSEunjzbcj - 7OU8KcYSlosw4wqdI/G50aQAjSJf+M1wARHtbPvH9ULeks5AUhKyJYztrPJc1UJL ---- a/tests/vo_metadata.xml -+++ b/tests/vo_metadata.xml -@@ -1,11 +1,11 @@ - -- -- -- - - urn:mace:example.com:saml:aa diff --git a/python-pysaml2.changes b/python-pysaml2.changes index caa9c82..b8a773d 100644 --- a/python-pysaml2.changes +++ b/python-pysaml2.changes @@ -1,3 +1,27 @@ +------------------------------------------------------------------- +Wed Jan 20 20:12:26 UTC 2021 - Michael Ströder + +- Update to 6.5.0 - Security release + * Fix processing of invalid SAML XML documents - CVE-2021-21238 + * Fix unspecified xmlsec1 key-type preference - CVE-2021-21239 + * Add more tests regarding XSW attacks + * Add XML Schemas for SAML2 and common extensions + * Fix the XML parser to not break on ePTID AttributeValues + * Fix the initialization value of the return_addrs property of the StatusResponse object + * Fix SWAMID entity-category policy regarding eduPersonTargetedID + * data: use importlib to load package data (backwards compatibility through the importlib_resources package) + * docs: improve the documentation for the signing_algorithm and digest_algorithm options + * examples: fix the logging configuration of the example-IdP + * tests: allow tests to pass on 32bit systems by properly choosing dates in test XML documents + * tests: improvements on the generation of response and assertion objects + * tests: expand tests on python-3.9 and python-3.10-dev +- added new build dependencies: + * python3-importlib-resources + * python3-xmlschema + * update-alternatives +- removed obsolete avoid-too-large-dates.patch +- replaced %python3_alternative by %python_alternative + ------------------------------------------------------------------- Wed Jan 6 10:49:48 UTC 2021 - Matej Cepl diff --git a/python-pysaml2.spec b/python-pysaml2.spec index 02a3a8d..921e38e 100644 --- a/python-pysaml2.spec +++ b/python-pysaml2.spec @@ -20,19 +20,17 @@ %global modname pysaml2 %global skip_python2 1 Name: python-pysaml2 -Version: 6.3.1 +Version: 6.5.0 Release: 0 Summary: Python implementation of SAML Version 2 to be used in a WSGI environment License: Apache-2.0 URL: https://github.com/IdentityPython/pysaml2 Source: https://github.com/IdentityPython/pysaml2/archive/v%{version}.tar.gz -# PATCH-FIX-UPSTREAM avoid-too-large-dates.patch gh#IdentityPython/pysaml2#759 mcepl@suse.com -# avoid Y38K bug on 32bit machines. -Patch0: avoid-too-large-dates.patch BuildRequires: %{python_module Paste} BuildRequires: %{python_module cryptography >= 1.4} BuildRequires: %{python_module dbm} BuildRequires: %{python_module defusedxml} +BuildRequires: %{python_module importlib-resources} BuildRequires: %{python_module mock} BuildRequires: %{python_module pyOpenSSL} BuildRequires: %{python_module pymongo} @@ -44,8 +42,10 @@ BuildRequires: %{python_module requests >= 1.0.0} BuildRequires: %{python_module responses} BuildRequires: %{python_module setuptools} BuildRequires: %{python_module six} +BuildRequires: %{python_module xmlschema} BuildRequires: %{python_module zope.interface} BuildRequires: fdupes +BuildRequires: update-alternatives # This is needed as xmlsec itself does not pull any backend by default # Will be fixed in future xmlsec releases BuildRequires: libxmlsec1-openssl1 @@ -75,7 +75,6 @@ SAML2 service provider or an identity provider. %prep %setup -q -n %{modname}-%{version} %ifarch %{ix86} -%patch0 -p1 %endif # delete shebang of files not in executable path @@ -110,10 +109,10 @@ done %files %{python_files} %license LICENSE %doc README.rst CHANGELOG.md -%python3_alternative %{_bindir}/make_metadata.py -%python3_alternative %{_bindir}/parse_xsd2.py -%python3_alternative %{_bindir}/mdexport.py -%python3_alternative %{_bindir}/merge_metadata.py +%python_alternative %{_bindir}/make_metadata.py +%python_alternative %{_bindir}/parse_xsd2.py +%python_alternative %{_bindir}/mdexport.py +%python_alternative %{_bindir}/merge_metadata.py %{python_sitelib}/* %changelog diff --git a/v6.3.1.tar.gz b/v6.3.1.tar.gz deleted file mode 100644 index 4e9c9f7..0000000 --- a/v6.3.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:54a5ec11da37abde1792207412a83e7f1da817179ffe864e35014dcdfdf2227d -size 5959873 diff --git a/v6.5.0.tar.gz b/v6.5.0.tar.gz new file mode 100644 index 0000000..a0b6443 --- /dev/null +++ b/v6.5.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:97ed9307a870e4591472e021cf54cb9507010a3acca93cd36fe1ef4b2438fb50 +size 5991803