Merge pull request #175 from OpenConext/feature/cve-2019-3465-r16

Upgrade xmlseclibs to version 3.0.4
OpenConext · Nov 7, 2019 · 2f7323f · 2f7323f
2 parents 9c0d421 + 1d3c71f
commit 2f7323f
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 9 deletions.
diff --git a/.travis.yml b/.travis.yml
@@ -27,8 +27,13 @@ before_script:
 script:
   - ant
 
-
 branches:
   only:
     - master
     - develop
+    - release/2.10
+
+addons:
+  apt:
+    packages:
+      - ant
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## 2.10.7
+This is a security release that will harden the application against CVE 2019-346
+ * Upgrade xmlseclibs to version 3.0.4 #175
+
+## 2.10.5 & 2.10.6
+No release notes provided
+
 ## 2.10.4
 **Improvement**
 * Optimized the PSR-4 autoload configuration

diff --git a/composer.lock b/composer.lock