Skip to content

Commit db1e9a6

Browse files
authored
Merge pull request SAML-Toolkits#100 from samm0ss/fix_readme_warning
fix confusing alternative naming of python3-saml in readme warning
2 parents 62148cb + 2fec2a8 commit db1e9a6

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,11 @@ This version supports Python3, There is a separate version that only support Pyt
1414

1515
#### Warning ####
1616

17-
Update python-saml to 1.4.0, this version includes a fix for the [CVE-2017-11427](https://www.cvedetails.com/cve/CVE-2017-11427/) vulnerability.
17+
Update python3-saml to 1.4.0, this version includes a fix for the [CVE-2017-11427](https://www.cvedetails.com/cve/CVE-2017-11427/) vulnerability.
1818

1919
This version also changes how the calculate fingerprint method works, and will expect as input a formatted x509 certificate
2020

21-
Update python-saml3 to 1.2.6 that adds the use defusedxml that will prevent XEE and other attacks based on the abuse of XML. (CVE-2017-9672)
21+
Update python3-saml to 1.2.6 that adds the use defusedxml that will prevent XEE and other attacks based on the abuse of XML. (CVE-2017-9672)
2222

2323
Update python3-saml to >= 1.2.1, 1.2.0 had a bug on signature validation process (when using wantAssertionsSigned and wantMessagesSigned). [CVE-2016-1000251](https://github.com/distributedweaknessfiling/DWF-Database-Artifacts/blob/master/DWF/2016/1000251/CVE-2016-1000251.json)
2424

0 commit comments

Comments
 (0)