Upgrade xmlseclibs to version 3.0.4

This change will apply the countermeasures to harden against CVE 2019-3465 and will effectively bump `robrichards/xmlseclibs` to version 3.0.4
OpenConext · Nov 7, 2019 · 1d3c71f · 1d3c71f
1 parent 882f8e6
commit 1d3c71f
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 8 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## 2.10.7
+This is a security release that will harden the application against CVE 2019-346
+ * Upgrade xmlseclibs to version 3.0.4 #175
+
+## 2.10.5 & 2.10.6
+No release notes provided
+
 ## 2.10.4
 **Improvement**
 * Optimized the PSR-4 autoload configuration

diff --git a/composer.lock b/composer.lock