Unscored DSA-1895-2 3 CVEs

opensaml2, shibboleth-sp2 - interpretation conflict

Published Oct 9, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 5.0	opensaml2	2.0-2+lenny1
Debian · 5.0	shibboleth-sp2	2.0.dfsg1-4+lenny1

Vulnerabilities 3

Unscored —

CVE-2009-3474

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before …

shibboleth-sp xmltooling opensaml Debian

Sep 29, 2009
Unscored —

CVE-2009-3475

Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validatio…

xmltooling shibboleth-sp opensaml Debian

Sep 29, 2009
Unscored —

CVE-2009-3476

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, …

shibboleth-sp xmltooling opensaml Debian

Sep 29, 2009