Boletines de Vulnerabilidades |
DSA-4630 python-pysaml2 - security update |
|
Información sobre el sistema |
|
Software afectado | Debian |
Descripción |
|
It was discovered that pysaml2, a Python implementation of SAML to beused in a WSGI environment, was susceptible to XML signature wrappingattacks, which could result in a bypass of signature verification. More info: https://www.debian.org/security/2020/dsa-4630 |
|
Identificadores estándar |
|
Propiedad | Valor |
CVE | CVE-2020-5390 and DSA-4630. |
Histórico de versiones |
||
Versión | Comentario | Fecha |
1.0 | Advisory issued | 2020-02-24 |