Security update for shibboleth-sp (important)

2017-12-0521:10:58

lists.opensuse.org

EPSS

0.004

Percentile

75.0%

JSON

This update for shibboleth-sp fixes the following issues:

Security issue fixed:

CVE-2017-16852: Fix critical security checks in the Dynamic
MetadataProvider plugin in Shibboleth Service (bsc#1068689).

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Software Development Kit12.2s390xshibboleth-sp-devel< 2.5.5-6.3.1shibboleth-sp-devel-2.5.5-6.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit12.2x86_64shibboleth-sp-debugsource< 2.5.5-6.3.1shibboleth-sp-debugsource-2.5.5-6.3.1.x86_64.rpm
SUSE Linux Enterprise Server12.3x86_64shibboleth-sp< 2.5.5-6.3.1shibboleth-sp-2.5.5-6.3.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit12.2aarch64shibboleth-sp-debugsource< 2.5.5-6.3.1shibboleth-sp-debugsource-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.3x86_64libshibsp-lite6-debuginfo< 2.5.5-6.3.1libshibsp-lite6-debuginfo-2.5.5-6.3.1.x86_64.rpm
SUSE Linux Enterprise Server for Raspberry Pi12.2aarch64libshibsp-lite6-debuginfo< 2.5.5-6.3.1libshibsp-lite6-debuginfo-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.2aarch64shibboleth-sp< 2.5.5-6.3.1shibboleth-sp-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.2aarch64libshibsp-lite6< 2.5.5-6.3.1libshibsp-lite6-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server for Raspberry Pi12.2aarch64libshibsp6-debuginfo< 2.5.5-6.3.1libshibsp6-debuginfo-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.2s390xlibshibsp-lite6< 2.5.5-6.3.1libshibsp-lite6-2.5.5-6.3.1.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Software Development Kit	12.2	s390x	shibboleth-sp-devel	< 2.5.5-6.3.1	shibboleth-sp-devel-2.5.5-6.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit	12.2	x86_64	shibboleth-sp-debugsource	< 2.5.5-6.3.1	shibboleth-sp-debugsource-2.5.5-6.3.1.x86_64.rpm
SUSE Linux Enterprise Server	12.3	x86_64	shibboleth-sp	< 2.5.5-6.3.1	shibboleth-sp-2.5.5-6.3.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit	12.2	aarch64	shibboleth-sp-debugsource	< 2.5.5-6.3.1	shibboleth-sp-debugsource-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.3	x86_64	libshibsp-lite6-debuginfo	< 2.5.5-6.3.1	libshibsp-lite6-debuginfo-2.5.5-6.3.1.x86_64.rpm
SUSE Linux Enterprise Server for Raspberry Pi	12.2	aarch64	libshibsp-lite6-debuginfo	< 2.5.5-6.3.1	libshibsp-lite6-debuginfo-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.2	aarch64	shibboleth-sp	< 2.5.5-6.3.1	shibboleth-sp-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.2	aarch64	libshibsp-lite6	< 2.5.5-6.3.1	libshibsp-lite6-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server for Raspberry Pi	12.2	aarch64	libshibsp6-debuginfo	< 2.5.5-6.3.1	libshibsp6-debuginfo-2.5.5-6.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.2	s390x	libshibsp-lite6	< 2.5.5-6.3.1	libshibsp-lite6-2.5.5-6.3.1.s390x.rpm