Stay Secure with the Latest Linux Advisories

security advisorycriticaldebian

Debian DSA-4872-1 Critical: Shibboleth SP Phishing Risk

Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional information please refer to the upstream advisory at . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-4872-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2021 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : shibboleth-sp CVE ID : not yet available Debian Bug : 985405 Toni Huttunen discovered that the Shibboleth service provider's template engine used to render error pages could be abused for phishing attacks. For additional information please refer to the upstream advisory at https://shibboleth.net/community/advisories/secadv_20210317.txt For the stable distribution (buster), this problem has been fixed in version 3.0.4+dfsg1-1+deb10u1. We recommend that you upgrade your shibboleth-sp packages. For the detailed security status of shibboleth-sp please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/shibboleth-sp Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Debian Security Advisory DSA-4873-1 concerns the threats posed by vulnerabilities in the template engine of Apache's HTTP server related to phishing concerns.. Shibboleth Update, Debian Security, Template Vulnerability. . Severity: Critical. LinuxSecurity.com Team

Mar 18, 2021 •Critical Debian