Skip to content

Commit a5a520b

Browse files
committed
Update xmlseclibs to 3.0.4
1 parent 22dd6f6 commit a5a520b

2 files changed

Lines changed: 4 additions & 2 deletions

File tree

README.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,8 @@ and supported by OneLogin Inc.
1010
Warning
1111
-------
1212

13+
Version 3.3.1 updates xmlseclibs to 3.0.4 (CVE-2019-3465), but php-saml was not directly affected since it implements additional checks that prevent to exploit that vulnerability.
14+
1315
Version 3.3.0 sets strict mode active by default
1416

1517
Update php-saml to 3.1.0, this version includes a security patch related to XEE attacks.

composer.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,11 @@
1616
},
1717
"require": {
1818
"php": ">=5.4",
19-
"robrichards/xmlseclibs": ">=3.0.3"
19+
"robrichards/xmlseclibs": ">=3.0.4"
2020
},
2121
"require-dev": {
22+
"php-coveralls/php-coveralls": "^2.1",
2223
"phpunit/phpunit": "^4.8.35 || ^5.7 || ^6.5 || ^7.1",
23-
"php-coveralls/php-coveralls": "^1.0.2 || ^2.0",
2424
"sebastian/phpcpd": "^2.0 || ^3.0 || ^4.0",
2525
"phploc/phploc": "^2.1 || ^3.0 || ^4.0",
2626
"pdepend/pdepend": "^2.5.0",

0 commit comments

Comments
 (0)