python-pysaml2 4.5.0-4+deb10u1 source package in Debian

Changelog

python-pysaml2 (4.5.0-4+deb10u1) buster-security; urgency=medium

  * CVE-2020-5390: does not check that the signature in a SAML document is
    enveloped and thus signature wrapping is effective, i.e., it is affected by
    XML Signature Wrapping (XSW). Applied upstream patch: Fix XML Signature
    Wrapping (XSW) vulnerabilities (Closes: #949322).
  * Remove a test file that will fail past 2020-11-28 (Closes: #949227).
  * Add fix-importing-mock-in-py2.7.patch.
  * Add remove-test_switch_1.patch.

 -- Thomas Goirand <email address hidden>  Fri, 07 Feb 2020 09:27:20 +0100