python-pysaml2 (6.5.1-1) unstable; urgency=medium * New upstream release. - Fix CVE-2021-21238 and CVE-2021-21239 (Closes: #980772, #980773). * Update patches to match new upstream release. * Add python3-importlib-resources and python3-xmlschema as (build-)depends. * Reworked python3.9-use-encodebytes-not-encodestring.patch. -- Thomas Goirand Wed, 03 Feb 2021 12:41:36 +0100 python-pysaml2 (6.1.0-3) unstable; urgency=medium * Removed python3-crypto from build-depends (Closes: #971290). -- Thomas Goirand Sun, 22 Nov 2020 12:51:21 +0100 python-pysaml2 (6.1.0-2) unstable; urgency=medium * Uploading to unstable. * Fixed watch file. * Add a debian/salsa-ci.yml. * Add python3-cffi{,backend} as (build-)depends. * Add a debian/salsa-ci.yml. * Add python3.9-use-encodebytes-not-encodestring.patch. -- Thomas Goirand Wed, 14 Oct 2020 13:04:12 +0200 python-pysaml2 (6.1.0-1) experimental; urgency=medium * New upstream release. * Fixed (build-)depends for this release. * Remove tests that don't apply, rebase/refresh the others. * Install the package in debian/tmp before running tests. * Defines: http_proxy=127.0.0.1:9 https_proxy=127.0.0.9:9 HTTP_PROXY=127.0.0.1:9 HTTPS_PROXY=127.0.0.1:9 RES_OPTIONS=attempts:0 before running tests to ensure no external network is required. * Use -Wignore option of pytest to ignore deprecation warnings. * Add remove-not-discoverable-test.patch. * -k "not test_signed_metadata_proper_str_bytes_handling and not test_enc1" to avoid broken tests (ie: requiring network access). * Fixed installing files for this new release. * Correctly build the doc from "docs" folder (previously "doc"), and build the sphinx docs using the installed saml2 module. -- Thomas Goirand Fri, 25 Sep 2020 14:05:27 +0200 python-pysaml2 (4.5.0-8) unstable; urgency=medium * Add patch to remove broken unit tests (Closes: #952249): - remove-tests-which-wont-work-after-2020-02-18.patch -- Thomas Goirand Tue, 25 Feb 2020 11:35:12 +0100 python-pysaml2 (4.5.0-7) unstable; urgency=high [ Ondřej Nový ] * Run wrap-and-sort -bastk. * Use 'python3 -m sphinx' instead of sphinx-build for building docs. [ Thomas Goirand ] * CVE-2020-5390: does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). Applied upstream patch: Fix XML Signature Wrapping (XSW) vulnerabilities (Closes: #949322). * Remove a test file that will fail past 2020-11-28 (Closes: #949227). -- Thomas Goirand Fri, 07 Feb 2020 09:12:46 +0100 python-pysaml2 (4.5.0-5) unstable; urgency=medium [ Ondřej Nový ] * Use debhelper-compat instead of debian/compat. [ Thomas Goirand ] * Removed Python 2 support (Closes: #938093). * Add remove-test-timeout.patch. -- Thomas Goirand Mon, 02 Sep 2019 17:17:52 +0200 python-pysaml2 (4.5.0-4) unstable; urgency=medium * CVE-2017-1000246: Reuse of AES initialization vector in AESCipher / UsernamePasswordMako / Server. Backported upstream patch: CVE-2017-1000246_Always_generate_a_random_IV_for_AES_operations.patch (Closes: #882012). -- Thomas Goirand Fri, 07 Sep 2018 11:54:53 +0200 python-pysaml2 (4.5.0-3) unstable; urgency=medium * Also remove test_load_remote_encoding() test which is doing network access during build (Closes: #907944). -- Thomas Goirand Fri, 07 Sep 2018 11:34:59 +0200 python-pysaml2 (4.5.0-2) unstable; urgency=medium * Uploading to unstable. -- Thomas Goirand Mon, 03 Sep 2018 17:05:03 +0200 python-pysaml2 (4.5.0-1) experimental; urgency=medium [ Ondřej Nový ] * d/control: Use team+openstack@tracker.debian.org as maintainer [ Thomas Goirand ] * New upstream release. (Closes: #857848, #882012, #886423, #859135). * Refreshed/rebased all patches. * Added python{3,}-defusedxml as (build-)depends. * Add python{3,}-future as (buid-)depends. -- Thomas Goirand Mon, 20 Aug 2018 16:47:23 +0200 python-pysaml2 (4.0.2-3) unstable; urgency=medium [ Ondřej Nový ] * Running wrap-and-sort -bast [ Thomas Goirand ] * Sets http_proxy to the discard port to make sure tests aren't doing network access. * Add patch to also remove tests/test_83_md_extensions.py that fails test discovery. * Also removed test_load_extern_incommon() which is doing network access. * Also removed test_enc1() failing for an unknown reason. -- Thomas Goirand Mon, 30 Apr 2018 10:24:47 +0000 python-pysaml2 (4.0.2-2) unstable; urgency=medium * Uploading to unstable. * Add missing build-depends: python{3,}-mock. -- Thomas Goirand Sun, 25 Feb 2018 20:46:48 +0000 python-pysaml2 (4.0.2-1) experimental; urgency=medium * Fixed VCS URLs (https). * d/rules: Changed UPSTREAM_GIT protocol to https * d/copyright: Changed source URL to https protocol [ gustavo panizzo ] * Increase the minimum version of python-pyasn1 required. [ Daniel Baumann ] * Updating vcs fields. * Updating copyright format url. * Updating maintainer field. * Running wrap-and-sort -bast. * Updating standards version to 4.0.0. * Removing gbp.conf, not used anymore or should be specified in the developers dotfiles. * Correcting permissions in debian packaging files. * Updating standards version to 4.0.1. * Updating standards version to 4.1.0. [ Ondřej Nový ] * d/control: Set Vcs-* to salsa.debian.org [ Thomas Goirand ] * New upstream release. * Using pkgos-dh_auto_install. * Remove one failing test. * Fixed debian/copyright ordering and years. * Standards-Version is now 4.1.3. * Using debhelper 10. -- Thomas Goirand Wed, 14 Feb 2018 13:41:27 +0000 python-pysaml2 (3.0.0-3) unstable; urgency=medium * override_dh_python3 to fix Py3 shebang. -- Thomas Goirand Fri, 23 Oct 2015 23:48:31 +0000 python-pysaml2 (3.0.0-2) unstable; urgency=medium * Uploading to unstable. -- Thomas Goirand Fri, 16 Oct 2015 10:34:56 +0000 python-pysaml2 (3.0.0-1) experimental; urgency=medium * New upstream release. * Added Python3 support. * Updated watch file to use github tag and not broken pypi. -- Thomas Goirand Fri, 31 Jul 2015 08:47:57 +0000 python-pysaml2 (2.4.0-2) unstable; urgency=medium * Makes build reproducible thanks to Juan Picca (Closes: #789751). -- Thomas Goirand Fri, 26 Jun 2015 15:41:09 +0200 python-pysaml2 (2.4.0-1) unstable; urgency=medium * New upstream release. * Dropped X-Python-Version: >= 2.7. * Standard-Versions: is now 3.9.6. * Also renames /usr/bin/merge_metadata.py as pysaml2-merge-metadata. -- Thomas Goirand Fri, 15 May 2015 17:48:07 +0200 python-pysaml2 (2.0.0-1) unstable; urgency=medium * Initial release. (Closes: #760824) -- Thomas Goirand Mon, 08 Sep 2014 16:11:53 +0800