https://security-tracker.debian.org/tracker/DSA-5822-1
Материал поверхности: Винил. Поверхность: Рельефная. Материал основы: Флизелин. Тип элемента: Обои. Применение: Спальня, Прихожая, Гостиная, Кухня. Ширина рулона (м): 0.53. Длина рулона (м): 10.05. Влагостойкость: Моются щеткой. Цвет: Бежевый, Белый. Дизайн: Полосы. Совмещение рисунка: Любое Виниловые обои Erismann Vie En Rose 5822-14 Влагостойкость Моются щеткой Дизайн Полосы Длина рулона (м) 10.05 Материал основы Флизелин Материал […]
The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.
A signature-validation bypass issue was discovered in SimpleSAMLphp through 1.14.16. A SimpleSAMLphp Service Provider using SAML 1.1 will regard as valid any unsigned SAML response containing more than one signed assertion, provided that the signature of at least one of the assertions is valid. Attributes contained in all the assertions received will be merged and the entityID of the first assertion received will be used, allowing an attacker to impersonate any user of any IdP given an assertion signed by…