Skip to content
OpenAdvisories
Medium USN-5066-2 1 CVE

python-pysaml2 vulnerability

Published Sep 8, 2021 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5066-1 fixed a vulnerability in PySAML2. This update provides
the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Brian Wolff discovered that PySAML2 incorrectly validated cryptographic
signatures. A remote attacker could possibly use this issue to alter SAML
documents.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS python-pysaml2 3.0.0-3ubuntu1.16.04.4+esm1

Vulnerabilities 1

  • Medium 6.5
    CVE-2021-21239 Public exploit

    Open default xmlsec1 key-type preference

    PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML d…

    IdentityPython pysaml2 python-pysaml2 pysaml2 Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2021-21239