Unscored DSA-1896-1 3 CVEs

opensaml shibboleth-sp - potential code execution

Published Sep 28, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 4

Release	Package	Fixed in
Debian · 4.0	opensaml	1.1a-2+etch1
Debian · 4.0	shibboleth-sp	1.3f.dfsg1-2+etch1
Debian · 5.0	opensaml	1.1.1-2+lenny1
Debian · 5.0	shibboleth-sp	1.3.1.dfsg1-3+lenny1

Vulnerabilities 3

Unscored —

CVE-2009-3474

OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before …

shibboleth-sp xmltooling opensaml Debian

Sep 29, 2009
Unscored —

CVE-2009-3475

Internet2 Shibboleth Service Provider software 1.3.x before 1.3.3 and 2.x before 2.2.1, when using PKIX trust validatio…

xmltooling shibboleth-sp opensaml Debian

Sep 29, 2009
Unscored —

CVE-2009-3476

Buffer overflow in OpenSAML before 1.1.3 as used in Internet2 Shibboleth Service Provider software 1.3.x before 1.3.4, …

shibboleth-sp xmltooling opensaml Debian

Sep 29, 2009