Package: python-pysaml2 / 2.0.0-1+deb8u1
Metadata
| Package | Version | Patches format |
|---|---|---|
| python-pysaml2 | 2.0.0-1+deb8u1 | 3.0 (quilt) |
Patch series
view the series file| Patch | File delta | Description |
|---|---|---|
| CVE 2016 10127_fix xxe in xml parsing.patch | (download) |
setup.py |
3 2 + 1 - 0 ! |
cve-2016-10127 fix xxe in xml parsing (related to #366) This fixes XXE issues on anything where pysaml2 parses XML directly as part of issue #366. It doesn't address the xmlsec issues discussed on that ticket as they are out of reach of a direct fix and need the underlying library to fix this issue. . The patch has been backported form the 3.0 branch to 2.0 by zigo@debian.org. |
1
