[ol8_appstream] lasso-2.6.0-12.el8.i686

Lasso is a library that implements the Liberty Alliance Single Sign On
standards, including the SAML and SAML2 specifications. It allows to handle
the whole life-cycle of SAML based Federations, and provides bindings
for multiple languages.

Changelog (Show File list) (Show related packages)

• Fri Jul 30 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-12

  - Fix a dead code issue in the signature wrapping patch
  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]

• Mon Jun 21 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-11

  - Bump release to force the package through OSCI as the previous
    build reached CI just in time for an outage
  - Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)

• Fri Jun 04 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-10

  - Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
                             vulnerability when parsing SAML responses [rhel-8]

• Thu May 06 2021 Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-9

  - Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
                             from lasso)

• Fri Oct 18 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-8

  - Resolves: rhbz#1730018 - lasso includes "Destination" attribute in SAML
                             AuthnRequest populated with SP
                             AssertionConsumerServiceURL when ECP workflow
                             is used which leads to IdP-side errors

• Fri Jun 14 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-7

  - Resolves: rhbz#1634268 - ECP signature check fails with
                             LASSO_DS_ERROR_SIGNATURE_NOT_FOUND when
                             assertion signed instead of response

• Thu Jun 13 2019 Jakub Hrozek <jhrozek@redhat.com> - 2.6.0-6

  - Resolves: rhbz#1719020 - Expired certificate prevents tests from running

• Tue Sep 25 2018 Tomas Orsava <torsava@redhat.com> - 2.6.0-5

  - Require the Python interpreter directly instead of using the package name
  - Resolves: rhbz#1633617

• Tue Jul 17 2018 <jdennis@redhat.com> - 2.6.0-4

  - more fixes for py2/py3 build dependencies

• Mon Jul 09 2018 <jdennis@redhat.com> - 2.6.0-3

  - Modify configure to search for versioned python
  - Resolves: rhbz#1598047
  - Related: rhbz#1589856