Debian Security Advisory

DLA-1178-1 opensaml2 -- LTS security update

Date Reported:
18 Nov 2017
Affected Packages:
Security database references:
In the Debian bugtracking system: Bug 881856.
In Mitre's CVE dictionary: CVE-2017-16853.
More information:

Rod Widdowson of Steading System Software LLP discovered a coding error in the OpenSAML library, causing the DynamicMetadataProvider class to fail configuring itself with the filters provided and omitting whatever checks they are intended to perform.

For Debian 7 Wheezy, these problems have been fixed in version 2.4.3-4+deb7u2.

We recommend that you upgrade your opensaml2 packages.

Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: