Boletines de Vulnerabilidades

DSA-4630 python-pysaml2 - security update


Información sobre el sistema

   
Software afectado Debian

Descripción

It was discovered that pysaml2, a Python implementation of SAML to beused in a WSGI environment, was susceptible to XML signature wrappingattacks, which could result in a bypass of signature verification.

More info:

https://www.debian.org/security/2020/dsa-4630

Identificadores estándar

Propiedad Valor
CVE CVE-2020-5390 and DSA-4630.

Histórico de versiones

Versión Comentario Fecha
1.0 Advisory issued 2020-02-24

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT