tocsin

Debian/simplesamlphp: high 8.1

HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accep

Action: Upgrade simplesamlphp to 1.15.4-1 or later.

Affected

introducedfixedlast affected
01.15.4-1-

Fixed versions

1.15.4-1

Sources

published · modified · JSON