Oracle alert ELSA-2021-2989 (lasso)
| From: | Errata Announcements for Oracle Linux <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2021-2989 Important: Oracle Linux 7 lasso security update | |
| Date: | Mon, 02 Aug 2021 16:06:26 -0700 | |
| Message-ID: | <61087a72.MY+R1Tm8bCAwSXuE%keshav.sharma@oracle.com> |
Oracle Linux Security Advisory ELSA-2021-2989 http://linux.oracle.com/errata/ELSA-2021-2989.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: lasso-2.5.1-8.el7_9.i686.rpm lasso-2.5.1-8.el7_9.x86_64.rpm lasso-devel-2.5.1-8.el7_9.i686.rpm lasso-devel-2.5.1-8.el7_9.x86_64.rpm lasso-python-2.5.1-8.el7_9.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/lasso-2.5.1-8.el7... Related CVEs: CVE-2021-28091 Description of changes: [2.5.1-8] - Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses [2.5.1-7] - Fix Coverity warning introduced by the previous patch - Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses [2.5.1-6] - Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping vulnerability when parsing SAML responses _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata