179 matches found
[SECURITY] [DLA 290-2] opensaml2 security update
Package : opensaml2 Version : 2.3-2+squeeze2 CVE ID : CVE-2015-0851 It was discovered that opensaml2, a Security Assertion Markup Language library, needed to be rebuilt against a fixed version of the xmltooling package due to its use of macros vulnerable to CVE-2015-0851 as fixed in the DSA 3321-...
Debian DLA-290-2 : opensaml2 security update
It was discovered that opensaml2, a Security Assertion Markup Language library, needed to be rebuilt against a fixed version of the xmltooling package due to its use of macros vulnerable to CVE-2015-0851 as fixed in the DSA 3321-1 update. NOTE: Tenable Network Security has extracted the preceding...
[SECURITY] [DLA 290-1] xmltooling security update
Package : xmltooling Version : 1.3.3-2+deb6u1 CVE ID : CVE-2015-0851 Debian Bug : 793855 Shibboleth SP software crashes on well-formed but invalid XML Another upload for opensaml2 is needed to really solve this issue. This will be done shortly...
DLA-290-1 xmltooling - security update
Bulletin has no description...
[SECURITY] [DSA 3321-2] opensaml2 security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3321-2 [email protected] https://www.debian.org/security/ Alessandro Ghedini August 08, 2015 https://www.debian.org/security/faq -...
DSA-3321-2 opensaml2 - security update
Bulletin has no description...
DoS против библиотеки XMLTooling
Unhandled exception on processing XML with invalid schema...
[SECURITY] [DSA 3321-1] xmltooling security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3321-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 30, 2015 https://www.debian.org/security/faq -...
Debian DSA-3321-1 : xmltooling - security update
The InCommon Shibboleth Training team discovered that XMLTooling, a C++ XML parsing library, did not properly handle an exception when parsing well-formed but schema-invalid XML. This could allow remote attackers to cause a denial of service crash via crafted XML data. %NASLMINLEVEL 70300 C Tenab...
[SECURITY] [DSA 3321-1] xmltooling security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3321-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 30, 2015 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3321-1 (xmltooling - security update)
The InCommon Shibboleth Training team discovered that XMLTooling, a C++ XML parsing library, did not properly handle an exception when parsing well-formed but schema-invalid XML. This could allow remote attackers to cause a denial of service crash via crafted XML data. OpenVAS Vulnerability Test...
DSA-3321-1 xmltooling - security update
Bulletin has no description...
Debian: Security Advisory (DSA-3321-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : shibboleth-sp -- DoS vulnerability (b202e4ce-3114-11e5-aa32-0026551a22dc)
Shibboleth consortium reports : Shibboleth SP software crashes on well-formed but invalid XML. The Service Provider software contains a code path with an uncaught exception that can be triggered by an unauthenticated attacker by supplying well-formed but schema-invalid XML in the form of SAML...
Fedora Update for opensaml-java-xmltooling FEDORA-2015-4726
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 22 Update: opensaml-java-xmltooling-1.3.4-9.fc22
Java XMLTooling is a low-level library that may be used to construct librar ies that allow developers to work with XML in a Java beans manner...
Debian DSA-1895-1 : xmltooling - several vulnerabilities
Several vulnerabilities have been discovered in the xmltooling packages, as used by Shibboleth : - Chris Ries discovered that decoding a crafted URL leads to a crash and potentially, arbitrary code execution. - Ian Young discovered that embedded NUL characters in certificate names were not...
[Backports-security-announce] Security Update for Shibboleth packages
Russ Allbery uploaded new packages for xmltooling, opensaml2, shibboleth-sp2, and shibboleth-sp which fixed the following security problems: CVE-2009-3300 The Shibboleth software includes code to perform arbitrary redirections and generates forms containing arbitrary destinations in certain cases...
Debian: Security Advisory (DSA-1895-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...