SUSE-SU-2019:3386-1

UNKNOWN

Security update for shibboleth-sp

Published Dec 23, 2019

Modified 6 years ago

Fix available

Details

This update for shibboleth-sp fixes the following issues:

Security issue fixed:

CVE-2019-19191: Fixed escalation to root by fixing ownership of log files (bsc#1157471).

Affected Packages

libshibsp-lite7

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

2.6.1-3.3.1

libshibsp7

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

2.6.1-3.3.1

shibboleth-sp

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

2.6.1-3.3.1

shibboleth-sp-devel

SUSE Linux Enterprise Module for Server Applications 15SUSE Linux Enterprise Module for Server Applications 15 SP1

Fixed in:

2.6.1-3.3.1

References

Upstream

Ecosystems

Timeline

PublishedDec 23, 2019

ModifiedDec 23, 2019