DSA-4630 python-pysaml2 – security update

It was discovered that pysaml2, a Python implementation of SAML to beused in a WSGI environment, was susceptible to XML signature wrappingattacks, which could result in a bypass of signature verification. More info: https://www.debian.org/security/2020/dsa-4630

DSA-4631 pillow – security update

Multiple security issues were discovered in Pillow, a Python imaginglibrary, which could result in denial of service and potentially theexecution of arbitrary code if malformed PCX, FLI, SGI or TIFF imagesare processed. More info: https://www.debian.org/security/2020/dsa-4631

DSA-4632 ppp – security update

Ilja Van Sprundel reported a logic flaw in the Extensible AuthenticationProtocol (EAP) packet parser in the Point-to-Point Protocol Daemon(pppd). An unauthenticated attacker can take advantage of this flaw totrigger a stack-based buffer overflow, leading to denial of service(pppd daemon crash). More info: https://www.debian.org/security/2020/dsa-4632
Translate »