Stay Secure with the Latest Linux Advisories

security advisorysoftware updateDebian

Debian 8: DLA-2119-1 Critical: pysaml2 XML Signature Bypass

It was discovered that pysaml2, a Python implementation of SAML to be used in a WSGI environment, was susceptible to XML signature wrapping attacks, which could result in a bypass of signature verification. . Package : python-pysaml2 Version : 2.0.0-1+deb8u3 CVE ID : CVE-2020-5390 Debian Bug : 949322 It was discovered that pysaml2, a Python implementation of SAML to be used in a WSGI environment, was susceptible to XML signature wrapping attacks, which could result in a bypass of signature verification. For Debian 8 "Jessie", this problem has been fixed in version 2.0.0-1+deb8u3. We recommend that you upgrade your python-pysaml2 packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Uncover the steps to resolve the vulnerability in pysaml2 on Debian LTS concerning XML signature wrapping attacks. Take action and upgrade today!. python pysaml2 security, Debian software update, XML attack fix. . Severity: Critical. LinuxSecurity.com Team

Feb 26, 2020 •Critical Debian LTS