DSA-1700-1 lasso -- incorrect API usage| ID: oval:org.secpod.oval:def:600291 | Date: (C)2011-05-13 (M)2022-10-10 |
| Class: PATCH | Family: unix |
It was discovered that Lasso, a library for Liberty Alliance and SAML protocols performs incorrect validation of the return value of OpenSSL"s DSA_verify function. For the stable distribution , this problem has been fixed in version 0.6.5-3+etch1. For the upcoming stable distribution and the unstable distribution , this problem has been fixed in version 2.2.1-2. We recommend that you upgrade your lasso package.
