[El-errata] ELSA-2021-2989 Important: Oracle Linux 7 lasso security update (aarch64)

Errata Announcements for Oracle Linux el-errata at oss.oracle.com
Mon Aug 2 16:06:33 PDT 2021


Oracle Linux Security Advisory ELSA-2021-2989

http://linux.oracle.com/errata/ELSA-2021-2989.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

aarch64:
lasso-2.5.1-8.el7_9.aarch64.rpm
lasso-python-2.5.1-8.el7_9.aarch64.rpm
lasso-devel-2.5.1-8.el7_9.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol7/SRPMS-updates/lasso-2.5.1-8.el7_9.src.rpm

Related CVEs:

CVE-2021-28091




Description of changes:

[2.5.1-8]
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses

[2.5.1-7]
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                      vulnerability when parsing SAML responses

[2.5.1-6]
- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
                       vulnerability when parsing SAML responses




More information about the El-errata mailing list