Changelog for python2-pysaml2-4.5.0-lp150.7.1.noarch.rpm :

* Fri Mar 05 2021 Johannes Grassler - Fix patches (SOC-11453)
* 0005-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch - rename saml2.xml to saml2.samlxml to avoid overriding the xml module in the system module path - add missing __init__.py files - add missing saml2/data package to setup.py
* 0007-Make-previous-commits-python2-compatible.patch so as not to - Adjust to saml2.xml to saml2.samlxml changes - Fix a few more syntax errors and Python2-isms.
* Wed Jan 27 2021 Jan Zerebecki - Fix CVE-2021-21238, bsc#1181277 with 0002-Strengthen-XSW-tests.patch , 0003-Fix-the-parser-to-not-break-on-ePTID-AttributeValues.patch , 0004-Add-xsd-schemas.patch , 0005-Fix-CVE-2021-21238-SAML-XML-Signature-wrapping.patch . This adds a dependency on python-xmlschema, which depends on python-elementpath, thus both need to be added for this to work. The used python-xmlschema needs to support the sandbox argument which was added in 1.2.0 and refined in 1.2.1, but that version doesn\'t support python2, so a patched version that does both is needed. Add 0007-Make-previous-commits-python2-compatible.patch to not add a dependency on reportlib_resources and make other changes python2 compatible. . Fix CVE-2021-21239, bsc#1181278 with 0006-Fix-CVE-2021-21239-Restrict-the-key-data-that-xmlsec.patch
* Fri Nov 13 2020 Guang Yee - Add 0001-Fix-XML-Signature-Wrapping-XSW-vulnerabilities.patch (CVE-2020-5390, bsc#1160851)
* Tue Oct 09 2018 Colleen Murphy - Replace python-pycryptodomex dep with python-cryptography - Dependency was swapped in afdf5b4
* Wed Nov 29 2017 okurzAATTsuse.com- Add missing runtime dependency on \'defusedxml\'- Add obsolete suse_version special handling
* Mon Oct 30 2017 michaelAATTstroeder.com- update to 4.5.0
* Mon Jun 19 2017 okurzAATTsuse.com- Convert to singlespec
* Tue Nov 22 2016 dmuellerAATTsuse.com- fix requires
* Thu Nov 17 2016 michaelAATTstroeder.com- update to 4.4.0- added LICENSE.txt to docs
* Fri Feb 26 2016 tbechtoldAATTsuse.com- Require python-python-dateutil. package was renamed
* Tue Oct 13 2015 dmuellerAATTsuse.com- add pycrypto/pyOpenSSL dependency
* Tue Sep 01 2015 tbechtoldAATTsuse.com- Move python-repoze.who from Recommends to Requires. It\'s needed.
* Thu Jul 30 2015 tbechtoldAATTsuse.com- Add missing Requires
* Thu Jul 16 2015 seife+obsAATTb1-systems.com- fix build on non-SUSE distributions whose rpm does not know \"Recommends\"
* Wed Jun 10 2015 dmuellerAATTsuse.com- update to 2.4.0:
* A couple of security fixes plus maintenance updates.