Search for packages
Package details: pkg:deb/debian/shibboleth-sp2@2.6.0%2Bdfsg1-4%2Bdeb9u1
purl pkg:deb/debian/shibboleth-sp2@2.6.0%2Bdfsg1-4%2Bdeb9u1
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-r5gj-jp7x-aaaq shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to properly configure itself with the MetadataFilter plugins and does not perform critical security checks such as signature verification, enforcement of validity periods, and other checks specific to deployments, aka SSPCPP-763. CVE-2017-16852

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T10:31:39.613075+00:00 Debian Oval Importer Fixing VCID-r5gj-jp7x-aaaq https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 36.1.3
2025-06-20T19:53:38.089497+00:00 Debian Oval Importer Fixing VCID-r5gj-jp7x-aaaq None 36.1.3
2025-06-08T04:14:50.655293+00:00 Debian Oval Importer Fixing VCID-r5gj-jp7x-aaaq https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 36.1.0
2025-06-07T13:44:25.750700+00:00 Debian Oval Importer Fixing VCID-r5gj-jp7x-aaaq None 36.1.0
2025-04-08T02:44:04.209533+00:00 Debian Oval Importer Fixing VCID-r5gj-jp7x-aaaq https://www.debian.org/security/oval/oval-definitions-stretch.xml.bz2 36.0.0
2025-04-07T12:19:40.739975+00:00 Debian Oval Importer Fixing VCID-r5gj-jp7x-aaaq None 36.0.0