Red Hat Security Advisory

RHSA-2017:0938

python-defusedxml and python-pysaml2 security update

Released 2017-04-12 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 10.0 python-defusedxml-0.5.0-1.el7ost, python-pysaml2-3.0.2-3.el7ost

Fixes 1 record

TI-2016-08225 CVE-2016-10149 · GHSA-c2vx-49jm-h3f6

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote…

MEDIUM 41

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05024 Published 2017-03-24 Partial fix · 4.5.0 CWE-611