[SECURITY] [DSA 2330-1] simplesamlphp security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2330-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 27, 2011 http://www.debian.org/security/faq -...

Debian DSA-2330-1 : simplesamlphp - XML encryption weakness

Issues were found in the handling of XML encryption in simpleSAMLphp, an application for federated authentication. The following two issues have been addressed : It may be possible to use an SP as an oracle to decrypt encrypted messages sent to that SP. It may be possible to use the SP as a key...

[SECURITY] [DSA 2330-1] simplesamlphp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2330-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 27, 2011 http://www.debian.org/security/faq -...

DSA-2330-1 simplesamlphp - several

Bulletin has no description...

Signature validation bypass

More info at https://simplesamlphp.org/security/201710-01...