Skip to content
OpenAdvisories
High ELSA-2016-2809 1 CVE

Important: ipsilon security update (Oracle Linux 7)

Published Nov 21, 2016 · Updated Nov 21, 2016

Ecosystem: Oracle Linux

Summary

[1.0.0-13]
- Backport patch for CVE-2016-8638 RHBZ#1394116

Fixed packages 12

ReleasePackageFixed in
Oracle Linux · 7 ipsilon 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-authform 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-authgssapi 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-authldap 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-base 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-client 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-filesystem 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-infosssd 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-persona 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-saml2 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-saml2-base 0:1.0.0-13.el7_3
Oracle Linux · 7 ipsilon-tools-ipa 0:1.0.0-13.el7_3

Vulnerabilities 1

  • Critical 9.1
    CVE-2016-8638

    Session Fixation in ipsilon

    A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated atta…

    ipsilon PyPI