Security update for opensaml (important)

2017-12-0721:11:59

lists.opensuse.org

EPSS

0.01

Percentile

83.6%

JSON

This update for opensaml fixes the following issues:

Security issue fixed:

CVE-2017-16853: Fix the DynamicMetadataProvider class to properly
configure itself with the MetadataFilter plugins, to avoid possible MITM
attacks (bsc#1068685).

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Software Development Kit12.3aarch64libsaml-devel< 2.5.5-3.3.1libsaml-devel-2.5.5-3.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.2s390xopensaml-bin-debuginfo< 2.5.5-3.3.1opensaml-bin-debuginfo-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Server12.2x86_64opensaml-bin-debuginfo< 2.5.5-3.3.1opensaml-bin-debuginfo-2.5.5-3.3.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit12.2ppc64leopensaml-debugsource< 2.5.5-3.3.1opensaml-debugsource-2.5.5-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Server12.3s390xopensaml-schemas< 2.5.5-3.3.1opensaml-schemas-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit12.2s390xopensaml-debugsource< 2.5.5-3.3.1opensaml-debugsource-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit12.3aarch64opensaml-debugsource< 2.5.5-3.3.1opensaml-debugsource-2.5.5-3.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.2ppc64lelibsaml8-debuginfo< 2.5.5-3.3.1libsaml8-debuginfo-2.5.5-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Software Development Kit12.3s390xlibsaml-devel< 2.5.5-3.3.1libsaml-devel-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Server12.3aarch64opensaml-debugsource< 2.5.5-3.3.1opensaml-debugsource-2.5.5-3.3.1.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Software Development Kit	12.3	aarch64	libsaml-devel	< 2.5.5-3.3.1	libsaml-devel-2.5.5-3.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.2	s390x	opensaml-bin-debuginfo	< 2.5.5-3.3.1	opensaml-bin-debuginfo-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Server	12.2	x86_64	opensaml-bin-debuginfo	< 2.5.5-3.3.1	opensaml-bin-debuginfo-2.5.5-3.3.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit	12.2	ppc64le	opensaml-debugsource	< 2.5.5-3.3.1	opensaml-debugsource-2.5.5-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Server	12.3	s390x	opensaml-schemas	< 2.5.5-3.3.1	opensaml-schemas-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit	12.2	s390x	opensaml-debugsource	< 2.5.5-3.3.1	opensaml-debugsource-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Software Development Kit	12.3	aarch64	opensaml-debugsource	< 2.5.5-3.3.1	opensaml-debugsource-2.5.5-3.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.2	ppc64le	libsaml8-debuginfo	< 2.5.5-3.3.1	libsaml8-debuginfo-2.5.5-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Software Development Kit	12.3	s390x	libsaml-devel	< 2.5.5-3.3.1	libsaml-devel-2.5.5-3.3.1.s390x.rpm
SUSE Linux Enterprise Server	12.3	aarch64	opensaml-debugsource	< 2.5.5-3.3.1	opensaml-debugsource-2.5.5-3.3.1.aarch64.rpm