|
1 | 1 | xmlseclibs.php |
2 | | -??, ??? ????, 2.0.0 |
3 | | -Features: |
4 | | -- Support for locating specific signature when multiple exist in |
5 | | - document. (griga3k) |
| 2 | + |
| 3 | +06, Nov 2019, 3.0.4 |
| 4 | +Security Improvements: |
| 5 | +- Insure only a single SignedInfo element exists within a signature during |
| 6 | + verification. Refs CVE-2019-3465. |
| 7 | +Bug Fixes: |
| 8 | +- Fix variable casing. |
| 9 | + |
| 10 | +15, Nov 2018, 3.0.3 |
| 11 | +Bug Fixes: |
| 12 | +- Fix casing of class name. (Willem Stuursma-Ruwen) |
| 13 | +- Fix Xpath casing. (Tim van Dijen) |
| 14 | + |
| 15 | +Improvements: |
| 16 | +- Make PCRE2 compliant. (Stefan Winter) |
| 17 | +- Add PHP 7.3 support. (Stefan Winter) |
| 18 | + |
| 19 | +27, Sep 2018, 3.0.2 |
| 20 | +Security Improvements: |
| 21 | +- OpenSSL is now a requirement rather than suggestion. (Slaven Bacelic) |
| 22 | +- Filter input to avoid XPath injection. (Jaime Pérez) |
| 23 | + |
| 24 | +Bug Fixes: |
| 25 | +- Fix missing parentheses (Tim van Dijen) |
| 26 | + |
| 27 | +Improvements: |
| 28 | +- Use strict comparison operator to compare digest values. (Jaime Pérez) |
| 29 | +- Remove call to file_get_contents that doesn't even work. (Jaime Pérez) |
| 30 | +- Document potentially dangerous return value behaviour. (Thijs Kinkhorst) |
| 31 | + |
| 32 | +31, Aug 2017, 3.0.1 |
| 33 | +Bug Fixes: |
| 34 | +- Fixed missing () in function call. (Dennis Væversted) |
| 35 | + |
| 36 | +Improvements: |
| 37 | +- Add OneLogin to supported software. |
| 38 | +- Add .gitattributes to remove unneeded files. (Filippo Tessarotto) |
| 39 | +- Fix bug in example code. (Dan Church) |
| 40 | +- Travis: add PHP 7.1, move hhvm to allowed failures. (Thijs Kinkhorst) |
| 41 | +- Drop failing extract-win-cert test (Thijs Kinkhorst). (Thijs Kinkhorst) |
| 42 | +- Add comments to warn about return values of verify(). (Thijs Kinkhorst) |
| 43 | +- Fix tests to properly check return code of verify(). (Thijs Kinkhorst) |
| 44 | +- Restore support for PHP >= 5.4. (Jaime Pérez) |
| 45 | + |
| 46 | +25, May 2017, 3.0.0 |
| 47 | +Improvements: |
| 48 | +- Remove use of mcrypt (skymeyer) |
| 49 | + |
| 50 | +08, Sep 2016, 2.0.1 |
| 51 | +Bug Fixes: |
| 52 | +- Strip whitespace characters when parsing X509Certificate. fixes #84 |
| 53 | + (klemen.bratec) |
| 54 | +- Certificate 'subject' values can be arrays. fixes #80 (Andreas Stangl) |
| 55 | +- HHVM signing node with ID attribute w/out namespace regenerates ID value. |
| 56 | + fixes #88 (Milos Tomic) |
| 57 | + |
| 58 | +Improvements: |
| 59 | +- Fix typos and add some PHPDoc Blocks. (gfaust-qb) |
| 60 | +- Update lightSAML link. (Milos Tomic) |
| 61 | +- Update copyright dates. |
6 | 62 |
|
7 | 63 | 23, Jun 2015, 1.4.0 |
8 | 64 | Features: |
|
0 commit comments