Stay Secure with the Latest Linux Advisories

security advisorysecurity issueupdate

Fedora 23: Security Advisory for Ipsilon Authentication Issues

Rebased to 1.1.1 release ---- ipsilon-1.0.0-5.fc23 - Backported some patches - Fix for CVE-2015-5215/CVE-2015-5216/CVE-2015-5217 ipsilon-1.0.0-5.fc22 - Backported some patches - Fix for CVE-2015-5215/CVE-2015-5216/CVE-2015-5217. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-15291 2015-11-08 05:29:14.349988 -------------------------------------------------------------------------------- Name : ipsilon Product : Fedora 23 Version : 1.1.1 Release : 2.fc23 URL : https://pagure.io/ipsilon Summary : An Identity Provider Server Description : Ipsilon is a multi-protocol Identity Provider service. Its function is to bridge authentication providers and applications to achieve Single Sign On and Federation. -------------------------------------------------------------------------------- Update Information: Rebased to 1.1.1 release ---- ipsilon-1.0.0-5.fc23 - Backported some patches - Fix for CVE-2015-5215/CVE-2015-5216/CVE-2015-5217 ipsilon-1.0.0-5.fc22 - Backported some patches - Fix for CVE-2015-5215/CVE-2015-5216/CVE-2015-5217 -------------------------------------------------------------------------------- References: [ 1 ] Bug #1271530 - CVE-2015-5301 ipsilon: missing user authorization check when deleting a service provider https://bugzilla.redhat.com/show_bug.cgi?id=1271530 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update ipsilon' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailinglist This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . The latest Fedora patch for Ipsilon tackles several security vulnerabilities, notably the absence of proper authorization verifications and implementations of backported updates.. Ipsilon Security Update, Fedora Update, Security Patches, Identity Provider. . LinuxSecurity.com Team

Nov 08, 2015 Fedora