Debian/opensaml: unknown
OpenSAML 2.x before 2.2.1 and XMLTooling 1.x before 1.2.1, as used by Internet2 Shibboleth Service Provider 2.x before 2.2.1, do not follow the KeyDescriptor element's Use attribute, which allows remo
Action: Upgrade opensaml to 3.0.0-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.0-2 | - |
Fixed versions
| 3.0.0-2 |
Sources
- osv: DEBIAN-CVE-2009-3474#Debian:13/opensaml
- https://security-tracker.debian.org/tracker/CVE-2009-3474
published · modified · JSON