[SECURITY] [DLA 1179-1] shibboleth-sp2 security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package : shibboleth-sp2
Version : 2.4.3+dfsg-5+deb7u2
CVE ID : CVE-2017-16852
Debian Bug : 881857
Rod Widdowson of Steading System Software LLP discovered a coding error
in the "Dynamic" metadata plugin of the Shibboleth Service Provider,
causing the plugin to fail configuring itself with the filters provided
and omitting whatever checks they are intended to perform.
For Debian 7 "Wheezy", these problems have been fixed in version
2.4.3+dfsg-5+deb7u2.
We recommend that you upgrade your shibboleth-sp2 packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=2i/M
-----END PGP SIGNATURE-----
Reply to: