Ubuntu
opensaml package

Shibboleth Security Advisory [25 July 2011]

Bug #832695 reported by Simon Lundström
258
This bug affects 1 person
Affects Status Importance Assigned to Milestone
opensaml (Ubuntu)
Confirmed
Medium
Unassigned

Bug Description

AFAIK this package is also affected by bug #816315 since Scott Cantor writes in the mail (http://marc.info/?l=shibboleth-announce&m=131160684316485&w=2): "All versions of the OpenSAML library prior to V2.4.3 contain this vulnerability."

This would include the opensaml version in hardy too.

CVE References

Simon Lundström (simmel)
visibility: private → public
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Thanks for taking the time to report this bug and helping to make Ubuntu better. Since the package referred to in this bug is in universe or multiverse, it is community maintained. If you are able, I suggest posting a debdiff for this issue. When a debdiff is available, members of the security team will review it and publish the package. See the following link for more information: https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures

Changed in opensaml (Ubuntu):
status: New → Confirmed
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.