Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Debian: DSA-5774-1: ruby-saml Security Advisory Updates
It was discovered that ruby-saml, a SAML library implementing the client side of a SAML authorization, does not properly verify the signature of the SAML Respo…
Debian LTS: DLA-3949-1: ruby-saml Security Advisory Updates
It was discovered that ruby-saml, a library for implementing the client side of a SAML authorization does not properly verify the signature of the SAML Respons…
Debian LTS: DLA-3981-1: simplesamlphp Security Advisory Updates
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to an XXE vulnerability when loading an (untrusted) XML document.
Debian: DSA-5822-1: simplesamlphp Security Advisory Updates
It was discovered that in SimpleSAMLphp, an implementation of the SAML 2.0 protocol, is prone to a XXE vulnerability when loading an (untrusted) XML document.
Debian LTS: DLA-3979-1: lemonldap-ng Security Advisory Updates
Multiple vulnerabilities were discovered in Lemonldap::NG, an OpenID-Connect, CAS and SAML compatible Web-SSO system, which could lead to injection of arbitrar…
Fedora 41: lemonldap-ng 2024-7bc1df53fc Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Fedora 39: lemonldap-ng 2024-d0a6c4ac13 Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…
Fedora 40: lemonldap-ng 2024-e457192aa2 Security Advisory Updates
Update to lemonldap-ng 2.20.1: [Security] Adaptative Authentication Rules triggered by "Refresh my rights" [Security] XSS in upgradeSession / forceUpgrade page…