Skip to content

Version 5.0.0 - Security release
Compare
Choose a tag to compare
@c00kiemon5ter c00kiemon5ter released this 13 Jan 10:09
· 490 commits to master since this release
v5.0.0
This tag was signed with the committer’s verified signature. The key has expired.
c00kiemon5ter Ivan Kanakarakis
GPG key ID: 762A5045469270CF
Expired
Learn about vigilant mode.
f27c7e7
This commit was signed with the committer’s verified signature. The key has expired.
c00kiemon5ter Ivan Kanakarakis
GPG key ID: 762A5045469270CF
Expired
Learn about vigilant mode.

5.0.0 (2020-01-13) - Security release

  • Fix XML Signature Wrapping (XSW) vulnerabilities - CVE-2020-5390
  • Add freshness period feature for MetaDataMDX
  • Fix bug in duration calculation in time_util library
  • Fix ipv6 validation to accommodate for addresses with brackets
  • Fix xmlsec temporary files deletions
  • Add method to get supported algorithms from metadata
  • Add mdstore method to extract assurance certifications
  • Add mdstore method to extract contact_person data
  • Add attribute mappings from the Swiss eduPerson Schema
  • Make AESCipher and Fernet interfaces compatible
  • Remove deprecated saml2.aes module
  • Remove deprecated saml2.extensions.ui module
  • Replace deprecated mongodb operations
  • Rename ToOld error to TooOld
  • Fix pytest warnings
  • Mock tests that need a network connection
  • Start dropping python2 support
Assets 2
Loading