Summary
[2.5.1-8]
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
[2.5.1-7]
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
[2.5.1-6]
- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | lasso | 0:2.5.1-8.el7_9 |
| Oracle Linux · 7 | lasso-devel | 0:2.5.1-8.el7_9 |
| Oracle Linux · 7 | lasso-python | 0:2.5.1-8.el7_9 |
Vulnerabilities 1
-
Unscored —
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.