PT-2021-14350 · Pypi +3 · Pysaml2 +3

🗓️ 21 Jan 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 4 Views

Upgrade the Python SAML library to version 6.5.0 to fix improper signature verification.

Reporter	Title	Published	Views	Family All 1555
0day.today	Grafana 7.0.1 - Denial of Service Exploit	7 Jul 202000:00	–	zdt
OSV	SUSE-SU-2019:2867-1 Security update for ardana-ansible, ardana-glance, ardana-horizon, ardana-input-model, ardana-manila, ardana-neutron, ardana-nova, ardana-octavia, ardana-tempest, crowbar-core, crowbar-ha, crowbar-openstack, crowbar-ui, galera-3, grafana, mariadb, mariadb-connector-c, novnc, openstack-cinder, openstack-glance, openstack-heat, openstack-horizon-plugin-neutron-vpnaas-ui, openstack-keystone, openstack-monasca-installer, openstack-neutron, openstack-neutron-gbp, openstack-neutron-lbaas, openstack-nova, python-amqp, python-ovs, python-pysaml2, python-python-engineio, python-urllib3, release-notes-suse-openstack-cloud, rubygem-easy_diff, rubygem-rest-client-1_6, venv-openstack-keystone	30 Oct 201916:36	–	osv
OSV	SUSE-SU-2019:2906-1 Security update for ardana-ansible, ardana-horizon, ardana-keystone, ardana-manila, ardana-neutron, crowbar-core, crowbar-openstack, grafana, openstack-cinder, openstack-dashboard, openstack-horizon-plugin-manila-ui, openstack-keystone, openstack-manila, openstack-neutron, openstack-neutron-fwaas, openstack-neutron-lbaas, openstack-nova, openstack-octavia, openstack-octavia-amphora-image, pdns, python-Django1, python-keystonemiddleware, python-octaviaclient, python-os-brick, python-oslo.cache, python-oslo.messaging	6 Nov 201911:13	–	osv
OSV	SUSE-SU-2020:1273-1 Security update for grafana	13 May 202014:23	–	osv
OSV	SUSE-SU-2020:1715-1 Security Beta update for SUSE Manager Client Tools and Salt	23 Jun 202012:41	–	osv
OSV	SUSE-SU-2020:1718-1 Security Beta update for SUSE Manager Client Tools and Salt	23 Jun 202012:44	–	osv
OSV	SUSE-SU-2020:1901-1 Security update for ansible, ansible1, ardana-ansible, ardana-cluster, ardana-freezer, ardana-input-model, ardana-logging, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-dashboard, openstack-dashboard-theme-HPE, openstack-heat-templates, openstack-keystone, openstack-monasca-agent, openstack-monasca-installer, openstack-neutron, openstack-octavia-amphora-image, python-Django, python-Flask, python-GitPython, python-Pillow, python-amqp, python-apicapi, python-keystoneauth1, python-oslo.messaging, python-psutil, python-pyroute2, python-pysaml2, python-tooz, python-waitress, storm	14 Jul 202012:42	–	osv
OSV	SUSE-SU-2020:1970-1 Security update for SUSE Manager Client Tools	21 Jul 202000:37	–	osv
OSV	SUSE-SU-2020:1972-1 Security update for SUSE Manager Client Tools	21 Jul 202000:39	–	osv
OSV	SUSE-SU-2020:2715-1 Security update for grafana	22 Sep 202015:11	–	osv

Source	Link
aleksey	www.aleksey.com/pipermail/xmlsec/2013/009717.html
github	www.github.com/IdentityPython/pysaml2/commit/46578df0695269a16f1c94171f1429873f90ed99
ubuntu	www.ubuntu.com/security/CVE-2021-21239
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2021-21239
ubuntu	www.ubuntu.com/security/notices/USN-5066-2
osv	www.osv.dev/vulnerability/USN-5066-2
osv	www.osv.dev/vulnerability/DLA-2577-1
bdu	www.bdu.fstec.ru/vul/2024-02841
osv	www.osv.dev/vulnerability/CVE-2021-21239
bdu	www.bdu.fstec.ru/vul/2020-05775

12 Jul 2024 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 46.9

CVSS 27.5

CVSS 3.16.5 - 9.8

CVSS 37.5

EPSS0.99856