diff --git a/README.md b/README.md index d7f5420..bc1156e 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ You will need to contact them in order to disable the cache for this SAML plugin wp-login.php -### Security Improvements on 3.2.0 ### +### Security Improvements on 3.2.0 and 3.2.1 ### Version 3.2.0 includes a security patch that prevent RelayState redirection attacks diff --git a/onelogin-saml-sso/readme.txt b/onelogin-saml-sso/readme.txt index 8ed5cb6..85a2de8 100644 --- a/onelogin-saml-sso/readme.txt +++ b/onelogin-saml-sso/readme.txt @@ -22,6 +22,11 @@ To mitigate that bug, place the script at the root of wordpress and execute it ( == Changelog == += 3.2.1 = +* Sanitize inputs +* Update php-saml to 3.4.1 +* Fix nameidformat field + = 3.2.0 = * Avoid untrusted redirections * Disable SAML on CLI/Cron on ACS and SLS endpoints. Allow custom filter to disable SAML diff --git a/onelogin-saml-sso/version.json b/onelogin-saml-sso/version.json index eb9532d..0f8fbdc 100644 --- a/onelogin-saml-sso/version.json +++ b/onelogin-saml-sso/version.json @@ -1,12 +1,12 @@ { "php-saml": { - "version": "3.3.1", - "released": "06/11/2019" + "version": "3.4.1", + "released": "25/11/2019" }, "plugin": { "app": "wordpress", "name": "onelogin-saml-sso", - "version": "3.2.0", - "released": "31/03/2020" + "version": "3.2.1", + "released": "07/04/2020" } }