Skip to content
OpenAdvisories
Medium ELSA-2021-4325 1 CVE

Moderate: lasso security and enhancement update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Summary

[2.6.0-12]
- Fix a dead code issue in the signature wrapping patch
- Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses [rhel-8]

[2.6.0-11]
- Bump release to force the package through OSCI as the previous
build reached CI just in time for an outage
- Related: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (comingfrom lasso)

[2.6.0-10]
- Resolves: rhbz#1951653 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses [rhel-8]

[2.6.0-9]
- Resolves: rhbz#1888195 - [RFE] release (built) python3-lasso pkg (coming
from lasso)

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 8 lasso 0:2.6.0-12.el8
Oracle Linux · 8 lasso-devel 0:2.6.0-12.el8

Vulnerabilities 1