Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Fedora 21: 2015-4807 Critical: Lasso Library Crash Issue

fedora
Calendar Grey April 6, 2015
Dist Fedora Esm H88
Essential security patch for lasso framework on Fedora 21 targeting CVE-2015-1783 to avert failures.
Security fix for CVE-2015-1783

Summary

Lasso is a library that implements the Liberty Alliance Single Sign On

standards, including the SAML and SAML2 specifications. It allows to handle

the whole life-cycle of SAML based Federations, and provides bindings

for multiple languages.

Update Information:

Security fix for CVE-2015-1783

Topics%20covered

Topics Covered

security advisory critical Fedora crash lasso

Change Log

* Thu Aug 28 2014 Simo Sorce - 2.4.1-1 - New upstream relase 2.4.1 - Drop patches as they have all been integrated upstream

References


[ 1 ] Bug #1199925 - CVE-2015-1783 lasso: use of uninitialized value leading to a crash https://bugzilla.redhat.com/show_bug.cgi?id=1199925

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update lasso' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: lasso
Product: Fedora 21
Version: 2.4.1
Release: 1.fc21
URL: https://lasso.entrouvert.org/
Summary: Liberty Alliance Single Sign On

Topics%20covered

Topics Covered

security advisory critical Fedora crash lasso

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here