CVE-2020-5390 — Improper Verification of Cryptographic Signature in PySAML2

Description

PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in different places and thus the signature verification will succeed, but the wrong data will be used. This specifically affects the verification of assertion that have been signed.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	python-pysaml2	4.5.0-7	—
Debian 13	python-pysaml2	4.5.0-7	—
Debian 12	python-pysaml2	4.5.0-7	—
Debian 10	python-pysaml2	4.5.0-4+deb10u1	DSA-4630-1
Debian 9	python-pysaml2	3.0.0-5+deb9u1	DSA-4630-1

Show 1 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Debian 8	python-pysaml2	2.0.0-1+deb8u3	DLA-2119-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 18.04 LTS	python-pysaml2	4.0.2-0ubuntu3.1	USN-4245-1
Ubuntu 16.04 LTS	python-pysaml2	3.0.0-3ubuntu1.16.04.4	USN-4245-1

SUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
SUSE OpenStack Cloud Crowbar 9	crowbar-core	6.0+git.1606314264.bf9ada813-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	crowbar-openstack	6.0+git.1604573541.bb18c172d-3.28.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	grafana	6.7.4-3.20.1	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	influxdb	1.3.8-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-cinder	13.0.10~dev20-3.28.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat	11.0.4~dev4-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat-gbp	12.0.1~dev2-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-heat-templates	0.0.0+git.1605509190.64f020b6-3.9.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-horizon-plugin-gbp-ui	12.0.1~dev3-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-ironic-python-agent	3.3.4~dev6-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-manila	7.4.2~dev57-4.30.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron	13.0.8~dev135-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron-gbp	12.0.1~dev5-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-neutron-vpnaas	13.0.2~dev6-3.9.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	openstack-nova	18.3.1~dev77-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-Jinja2	2.10.1-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-pysaml2	4.5.0-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-pytest	3.7.4-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	python-urllib3	1.23-3.15.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	release-notes-suse-openstack-cloud	9.20200917-3.24.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 9	spark	2.2.3-5.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud Crowbar 8	ansible	2.4.6.0-3.9.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	caasp-openstack-heat-templates	1.0+git.1560518045.ad7dc6d-4.18.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	crowbar-core	5.0+git.1593156248.55bbdb26d-3.41.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	crowbar-openstack	5.0+git.1593085772.64c4ab43c-4.40.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	documentation-suse-openstack-cloud-deployment +3	8.20200527-1.26.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	grafana	4.6.5-4.9.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	kibana	4.6.3-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	openstack-dashboard	12.0.5~dev3-3.26.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	openstack-heat-templates	0.0.0+git.1582270132.8a20477-3.15.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	openstack-keystone +1	12.0.4~dev11-5.33.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	openstack-monasca-agent	2.2.6~dev4-3.18.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	openstack-monasca-installer	20190923_16.32-3.12.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	openstack-neutron +1	11.0.9~dev65-3.33.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	openstack-octavia-amphora-image	0.1.4-3.12.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-Django	1.11.23-3.15.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-Flask	0.12.1-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-Pillow	4.2.1-3.5.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-amqp	2.4.2-3.12.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-apicapi	1.6.0-3.6.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-keystoneauth1	3.1.2~dev2-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-oslo.messaging	5.30.8-3.11.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-psutil	5.2.2-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-pyroute2	0.4.21-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-pysaml2	4.0.2-5.6.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-tooz	1.58.1-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	python-waitress	1.4.3-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	rubygem-activeresource	4.0.0-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	rubygem-crowbar-client	3.9.2-3.12.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	rubygem-json-1_7	1.7.7-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	rubygem-puma	2.16.0-3.9.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud Crowbar 8	storm	1.1.3-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 9	ardana-cassandra	9.0+git.1600802664.7e480a2-3.6.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	ardana-mq	9.0+git.1605174486.a78ddce-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	ardana-osconfig	9.0+git.1601621747.a87e5a0-3.22.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	ardana-tempest	9.0+git.1603378983.fc0bca9-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	grafana	6.7.4-3.20.1	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	influxdb	1.3.8-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-cinder	13.0.10~dev20-3.28.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-heat	11.0.4~dev4-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-heat-gbp	12.0.1~dev2-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-heat-templates	0.0.0+git.1605509190.64f020b6-3.9.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-horizon-plugin-gbp-ui	12.0.1~dev3-3.3.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-ironic-python-agent	3.3.4~dev6-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-manila	7.4.2~dev57-4.30.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-neutron	13.0.8~dev135-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-neutron-gbp	12.0.1~dev5-3.19.4	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-neutron-vpnaas	13.0.2~dev6-3.9.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	openstack-nova	18.3.1~dev77-3.31.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-Jinja2	2.10.1-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-pysaml2	4.5.0-4.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-pytest	3.7.4-3.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	python-urllib3	1.23-3.15.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	release-notes-suse-openstack-cloud	9.20200917-3.24.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	spark	2.2.3-5.3.3	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-barbican	7.0.1~dev24-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-cinder	13.0.10~dev20-3.24.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-designate	7.0.2~dev2-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-glance	17.0.1~dev30-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-heat	11.0.4~dev4-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-horizon	14.1.1~dev7-4.23.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-ironic	11.1.5~dev16-4.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-keystone	14.2.1~dev4-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-magnum	7.2.1~dev1-4.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-manila	7.4.2~dev57-3.25.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-monasca	2.7.1~dev10-3.19.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-monasca-ceilometer	1.8.2~dev3-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-neutron	13.0.8~dev135-6.23.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-nova	18.3.1~dev77-3.23.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-octavia	3.2.3~dev7-4.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-sahara	9.0.2~dev15-3.21.2	SUSE-SU-2020:3897-1
SUSE OpenStack Cloud 9	venv-openstack-swift	2.19.2~dev48-2.16.2	SUSE-SU-2020:3897-1

Show 3 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
SUSE OpenStack Cloud 8	ansible	2.4.6.0-3.9.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ansible1	1.9.6-7.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-ansible	8.0+git.1589740980.6c3bcdc-3.73.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-cluster	8.0+git.1585685203.3e71e49-3.36.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-freezer	8.0+git.1586539529.b7d295f-3.21.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-input-model	8.0+git.1589740934.0e0ad61-3.39.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-logging	8.0+git.1591194866.b7375d0-3.24.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-mq	8.0+git.1589715269.62ad6df-3.22.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-neutron	8.0+git.1590756744.ba84abc-3.42.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-octavia	8.0+git.1590100427.cf4cc8f-3.29.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	ardana-osconfig	8.0+git.1587034587.eac37b8-3.45.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	caasp-openstack-heat-templates	1.0+git.1560518045.ad7dc6d-4.18.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	documentation-suse-openstack-cloud-user +8	8.20200527-1.26.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	grafana	4.6.5-4.9.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	kibana	4.6.3-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	openstack-dashboard	12.0.5~dev3-3.26.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	openstack-heat-templates	0.0.0+git.1582270132.8a20477-3.15.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	openstack-keystone +1	12.0.4~dev11-5.33.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	openstack-monasca-agent	2.2.6~dev4-3.18.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	openstack-monasca-installer	20190923_16.32-3.12.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	openstack-neutron +1	11.0.9~dev65-3.33.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	openstack-octavia-amphora-image	0.1.4-3.12.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-Django	1.11.23-3.15.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-Flask	0.12.1-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-GitPython	2.1.8-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-Pillow	4.2.1-3.5.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-amqp	2.4.2-3.12.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-apicapi	1.6.0-3.6.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-keystoneauth1	3.1.2~dev2-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-oslo.messaging	5.30.8-3.11.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-psutil	5.2.2-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-pyroute2	0.4.21-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-pysaml2	4.0.2-5.6.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-tooz	1.58.1-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	python-waitress	1.4.3-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	storm	1.1.3-3.3.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-aodh	5.1.1~dev7-12.26.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-barbican	5.0.2~dev3-12.27.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-ceilometer	9.0.8~dev7-12.24.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-cinder	11.2.3~dev23-14.27.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-designate	5.0.3~dev7-12.25.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-freezer	5.0.0.0~xrc2~dev2-10.22.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-glance	15.0.3~dev3-12.25.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-heat	9.0.8~dev22-12.27.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-horizon	12.0.5~dev3-14.30.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-ironic	9.1.8~dev8-12.27.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-keystone	12.0.4~dev11-11.28.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-magnum	5.0.2_5.0.2_5.0.2~dev31-11.26.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-manila	5.1.1~dev5-12.31.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-monasca	2.2.2~dev1-11.22.3	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-monasca-ceilometer	1.5.1_1.5.1_1.5.1~dev3-8.22.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-murano	4.0.2~dev2-12.22.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-neutron	11.0.9~dev65-13.30.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-nova	16.1.9~dev61-11.28.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-octavia	1.0.6~dev3-12.27.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-sahara	7.0.5~dev4-11.26.2	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-swift	2.15.2_2.15.2_2.15.2~dev32-11.18.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 8	venv-openstack-trove	8.0.2~dev2-11.26.1	SUSE-SU-2020:1901-1
SUSE OpenStack Cloud 7	ansible	2.2.3.0-12.2	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	crowbar-core	4.0+git.1580209654.1d112d31f-9.66.5	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	crowbar-ha	4.0+git.1585316203.d6ad2c8-4.52.4	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	crowbar-openstack	4.0+git.1589804581.9972163f0-9.71.4	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	grafana	4.6.5-1.14.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	keepalived	2.0.19-1.8.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	kibana	4.6.3-5.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	memcached	1.5.17-3.6.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	monasca-installer	20180608_12.47-12.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	openstack-dashboard-theme-SUSE	2016.2-5.12.4	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	openstack-manila	3.0.1~dev30-4.12.2	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	openstack-manila-doc	3.0.1~dev30-4.12.3	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	openstack-neutron-fwaas	9.0.2~dev5-4.9.3	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	openstack-neutron-fwaas-doc	9.0.2~dev5-4.9.4	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	openstack-nova +1	14.0.11~dev13-4.40.2	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	openstack-tempest	12.2.1~a0~dev177-4.9.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	python-Django	1.8.19-3.23.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	python-Pillow	2.8.1-4.12.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	python-psql2mysql	0.5.0+git.1589351878.4ef877c-1.12.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	python-psutil	1.2.1-21.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	python-py	1.8.1-11.12.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	python-pysaml2	4.0.2-3.17.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	python-waitress	1.4.3-3.3.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	rabbitmq-server	3.4.4-3.16.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	release-notes-suse-openstack-cloud	7.20180803-3.18.3	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	rubygem-activeresource	4.0.0-3.3.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	rubygem-crowbar-client	3.9.2-7.20.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	rubygem-json-1_7	1.7.7-3.3.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	rubygem-puma	2.16.0-4.6.1	SUSE-RU-2020:2072-1
SUSE OpenStack Cloud 7	zookeeper	3.4.10-6.1	SUSE-RU-2020:2072-1
SUSE HPE Helion OpenStack 8	ansible	2.4.6.0-3.9.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ansible1	1.9.6-7.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-ansible	8.0+git.1589740980.6c3bcdc-3.73.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-cluster	8.0+git.1585685203.3e71e49-3.36.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-freezer	8.0+git.1586539529.b7d295f-3.21.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-input-model	8.0+git.1589740934.0e0ad61-3.39.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-logging	8.0+git.1591194866.b7375d0-3.24.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-mq	8.0+git.1589715269.62ad6df-3.22.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-neutron	8.0+git.1590756744.ba84abc-3.42.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-octavia	8.0+git.1590100427.cf4cc8f-3.29.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	ardana-osconfig	8.0+git.1587034587.eac37b8-3.45.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	caasp-openstack-heat-templates	1.0+git.1560518045.ad7dc6d-4.18.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	documentation-hpe-helion-openstack-user +5	8.20200527-1.26.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	grafana	4.6.5-4.9.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	kibana	4.6.3-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-dashboard	12.0.5~dev3-3.26.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-dashboard-theme-HPE	8+git.1523473653.6599ec8-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-heat-templates	0.0.0+git.1582270132.8a20477-3.15.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-keystone +1	12.0.4~dev11-5.33.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-monasca-agent	2.2.6~dev4-3.18.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-monasca-installer	20190923_16.32-3.12.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-neutron +1	11.0.9~dev65-3.33.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	openstack-octavia-amphora-image	0.1.4-3.12.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-Django	1.11.23-3.15.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-Flask	0.12.1-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-GitPython	2.1.8-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-Pillow	4.2.1-3.5.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-amqp	2.4.2-3.12.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-apicapi	1.6.0-3.6.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-keystoneauth1	3.1.2~dev2-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-oslo.messaging	5.30.8-3.11.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-psutil	5.2.2-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-pyroute2	0.4.21-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-pysaml2	4.0.2-5.6.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-tooz	1.58.1-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	python-waitress	1.4.3-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	storm	1.1.3-3.3.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-aodh	5.1.1~dev7-12.26.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-barbican	5.0.2~dev3-12.27.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-ceilometer	9.0.8~dev7-12.24.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-cinder	11.2.3~dev23-14.27.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-designate	5.0.3~dev7-12.25.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-freezer	5.0.0.0~xrc2~dev2-10.22.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-glance	15.0.3~dev3-12.25.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-heat	9.0.8~dev22-12.27.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-horizon-hpe	12.0.5~dev3-14.30.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-ironic	9.1.8~dev8-12.27.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-keystone	12.0.4~dev11-11.28.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-magnum	5.0.2_5.0.2_5.0.2~dev31-11.26.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-manila	5.1.1~dev5-12.31.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-monasca	2.2.2~dev1-11.22.3	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-monasca-ceilometer	1.5.1_1.5.1_1.5.1~dev3-8.22.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-murano	4.0.2~dev2-12.22.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-neutron	11.0.9~dev65-13.30.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-nova	16.1.9~dev61-11.28.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-octavia	1.0.6~dev3-12.27.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-sahara	7.0.5~dev4-11.26.2	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-swift	2.15.2_2.15.2_2.15.2~dev32-11.18.1	SUSE-SU-2020:1901-1
SUSE HPE Helion OpenStack 8	venv-openstack-trove	8.0.2~dev2-11.26.1	SUSE-SU-2020:1901-1

openSUSE

Security tracker ↗

Release	Package	Fixed in	Advisory
openSUSE Tumbleweed	python-pysaml2	7.4.2-1.2	openSUSE-SU-2026:11524-1, openSUSE-SU-2024:14156-1

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	pysaml2	< 5.0.0	5.0.0	GHSA-qf7v-8hj3-4xw7

Advisories 8

openSUSE-SU-2026:11524-1 python313-pysaml2-7.5.4-1.1 on GA media SUSE / openSUSE Security Updates · Aug 16, 2026
DSA-4630-1 python-pysaml2 - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-2119-1 python-pysaml2 - security update Debian Security (DSA / DLA) · Mar 9, 2026
USN-4245-1 python-pysaml2 vulnerability Ubuntu Security Notices (USN) · Feb 10, 2026
SUSE-SU-2020:3897-1 Security update for ardana-cassandra, ardana-mq, ardana-osconfig, ardana-tempest, crowbar-core, crowbar-openstack, grafana, influxdb, openstack-cinder, openstack-heat, openstack-heat-gbp, openstack-heat-templates, openstack-horizon-plugin-gbp-ui, openstack-ironic-python-agent, openstack-manila, openstack-neutron, openstack-neutron-gbp, openstack-neutron-vpnaas, openstack-nova, python-Jinja2, python-pysaml2, python-pytest, python-urllib3, release-notes-suse-openstack-cloud, spark SUSE / openSUSE Security Updates · Feb 4, 2026
openSUSE-SU-2024:14156-1 python310-pysaml2-7.4.2-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-RU-2020:2072-1 Security update for ansible, crowbar-core, crowbar-ha, crowbar-openstack, etcd, flannel, grafana, keepalived, kibana, memcached, monasca-installer, openstack-dashboard-theme-SUSE, openstack-manila, openstack-neutron-fwaas, openstack-nova, openstack-tempest, python-Django, python-Pillow, python-psql2mysql, python-psutil, python-py, python-pysaml2, python-waitress, rabbitmq-server, release-notes-suse-openstack-cloud, zookeeper SUSE / openSUSE Security Updates · Feb 4, 2026
SUSE-SU-2020:1901-1 Security update for ansible, ansible1, ardana-ansible, ardana-cluster, ardana-freezer, ardana-input-model, ardana-logging, ardana-mq, ardana-neutron, ardana-octavia, ardana-osconfig, caasp-openstack-heat-templates, crowbar-core, crowbar-openstack, documentation-suse-openstack-cloud, grafana, kibana, openstack-dashboard, openstack-dashboard-theme-HPE, openstack-heat-templates, openstack-keystone, openstack-monasca-agent, openstack-monasca-installer, openstack-neutron, openstack-octavia-amphora-im SUSE / openSUSE Security Updates · Feb 4, 2026

Improper Verification of Cryptographic Signature in PySAML2

Description

Fixed in Linux distributions

Debian

Ubuntu

SUSE

openSUSE

Affected packages

Advisories 8

References