[SECURITY] [DLA 1983-1] simplesamlphp security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Package : simplesamlphp
Version : 1.13.1-2+deb8u3
CVE ID : CVE-2019-3465
Debian Bug : 944107
It was discovered that in SimpleSAMLphp, an implementation of the
SAML 2.0 protocol, it was possible to circumvent XML signature
verification on SAML messages.
For Debian 8 "Jessie", this problem has been fixed in version
1.13.1-2+deb8u3.
We recommend that you upgrade your simplesamlphp packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCAAdFiEEeANVtepr/II1qZxLVvYaeUAdrAQFAl3CzQkACgkQVvYaeUAd
rATZ4AgApE7bBItYJNDbwdU9ROv0XoI1sUkCPRMGy22JSJ92uTo3Ltfdah1pMSZF
KdhkMEuvGjahASuauUMO7/NSNZX8YDwZ+LpqYUTzDVSeuCUWd5rS9wK27aai7PQh
pbgaq89tPBrHqA3xxEsEDUtSo/oZaObzSj+zZdscLQ+O4Ff9NGAgh92bIGAedG/U
XkrQm6CzVFwbwUuBOnqtxUGy+K3wa7KF0Pc0EzZa9wHcCwAMKuEubmqqjkbJW6gY
LLl1fiGvy1JFgpGhqqXTc4M3sZraK4UYbmsnr406/3cKMflFegxtPWQrlDiygqKy
/h0tDnm4SHf7G9X2wETsYVzWffYTMQ==
=yyxq
-----END PGP SIGNATURE-----
Reply to: