Skip to content

Commit fd1beeb

Browse files
committed
Release 1.2.1
1 parent 4eec1a3 commit fd1beeb

File tree

3 files changed

+8
-3
lines changed

3 files changed

+8
-3
lines changed

README.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,9 @@ This version supports Python3, There is a separate version that only support Pyt
1414

1515
#### Warning ####
1616

17-
Update python3-saml to 1.2.0, this version includes a security patch that contains extra validations that will prevent signature wrapping attacks.
17+
Update python3-saml to 1.2.1 that patch 1.2.0 (that had a bug on signature validation process (when using wantAssertionsSigned and wantMessagesSigned).
18+
19+
1.2.0 version includes a security patch that contains extra validations that will prevent signature wrapping attacks.
1820

1921
python3-saml < v1.2.0 is vulnerable and allows signature wrapping!
2022

changelog.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,8 @@
11
# python3-saml changelog
22

3+
### 1.2.1 (October 18, 2016)
4+
* [#30](https://github.com/onelogin/python3-saml/pull/30) Bug on signature checks
5+
36
### 1.2.0 (October 14, 2016)
47
* Several security improvements:
58
* Conditions element required and unique.
@@ -45,4 +48,4 @@
4548
* [#12](https://github.com/onelogin/python3-saml/pull/12) Add information about getting the demos up and running on Heroku
4649

4750
### 1.1.1 (Mar 17, 2016)
48-
* Make AttributeStatements requirement optional
51+
* Make AttributeStatements requirement optional

setup.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99

1010
setup(
1111
name='python3-saml',
12-
version='1.2.0',
12+
version='1.2.1',
1313
description='Onelogin Python Toolkit. Add SAML support to your Python software using this library',
1414
classifiers=[
1515
'Development Status :: 4 - Beta',

0 commit comments

Comments
 (0)