DLA-1179-1 shibboleth-sp2 - security update

Bulletin has no description...

Debian DSA-4038-1 : shibboleth-sp2 - security update

Rod Widdowson of Steading System Software LLP discovered a coding error in the 'Dynamic' metadata plugin of the Shibboleth Service Provider, causing the plugin to fail configuring itself with the filters provided and omitting whatever checks they are intended to perform. See...

BSA-2017-470

Security Advisory ID : BSA-2017-470 Component : Expand Entity References Revision : 1.0: Interim The 1 BasicParserPool, 2 StaticBasicParserPool, 3 XML Decrypter, and 4 SAML Decrypter in Shibboleth OpenSAML-Java before 2.6.1 set the expandEntityReferences property to true, which allows remote...

[SECURITY] [DSA 4038-1] shibboleth-sp2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4038-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 16, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4038-1] shibboleth-sp2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4038-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 16, 2017 https://www.debian.org/security/faq -...

CVE-2017-16852

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...

CVE-2017-16852

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...

CVE-2017-16852

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...

UBUNTU-CVE-2017-16852

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...

CVE-2017-16852

CVE-2017-16852 affects Shibboleth Service Provider (shibboleth-sp) via the Dynamic MetadataProvider plugin. In versions before 2.6.1, it may misconfigure with MetadataFilter plugins and skip critical checks such as signature verification and validity period enforcement, among other deployment-spe...

CVE-2017-16852

shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity...

DSA-4038-1 shibboleth-sp2 - security update

Bulletin has no description...

Debian: Security Advisory (DSA-4038-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

shibboleth2-sp -- "Dynamic" metadata provider plugin issue

The Internet2 community reports: The Shibboleth Service Provider software includes a MetadataProvider plugin with the plugin type "Dynamic" to obtain metadata on demand from a query server, in place of the more typical mode of downloading aggregates separately containing all of the metadata to...

Debian DSA-3973-1 : wordpress-shibboleth - security update

A cross-site-scripting vulnerability has been discovered in the login form of the Shibboleth identity provider module for Wordpress. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3973. T...

[SECURITY] [DSA 3973-1] wordpress-shibboleth security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3973-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 14, 2017 https://www.debian.org/security/faq -...

Debian DLA-1096-1 : wordpress-shibboleth security update

It was discovered that there was a an XSS vulnerability in the login form of the 'Shibboleth' identity provider module for Wordpress. For Debian 7 'Wheezy', this issue has been fixed in wordpress-shibboleth version 1.4-2+deb7u1. We recommend that you upgrade your wordpress-shibboleth packages...

DSA-3973-1 wordpress-shibboleth - security update

Bulletin has no description...

[SECURITY] [DLA 1096-1] wordpress-shibboleth security update

Package : wordpress-shibboleth Version : 1.4-2+deb7u1 CVE ID : CVE-2017-14313 Debian Bug : 874416 It was discovered that there was a an XSS vulnerability in the login form of the "Shibboleth" identity provider module for Wordpress. For Debian 7 "Wheezy", this issue has been fixed in...

Debian: Security Advisory (DSA-3973-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...