Security releases v1.1.1 and v1.0.2

Patrick Uiterwijk puiterwijk at redhat.com
Wed Oct 14 15:17:58 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi all,

We hereby announce the immediate availability of Ipsilon release 1.0.2 and 1.1.1.

These releases both have a fix for CVE-2015-5301[1].
This security issue made it possible for any authenticated user to remove a Service
Provider from Ipsilon, possibly resulting in a denial of service.

If you use the SAML2 identity provider plugin, we would suggest you to update as soon
as possible.
These updates do not necesitate a database upgrade within the respective release paths.

More information on the releases can be viewed on the release pages for 1.0.2[2] and
1.1.1[3].

To download the newest release, please go to https://fedorahosted.org/ipsilon/wiki/Releases


[1]: https://access.redhat.com/security/cve/CVE-2015-5301
[2]: https://fedorahosted.org/ipsilon/wiki/Releases/v1.0.2
[3]: https://fedorahosted.org/ipsilon/wiki/Releases/v1.1.1

- - - --
With kind regards,
Patrick Uiterwijk
Fedora Infra
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=H8Dz
-----END PGP SIGNATURE-----


More information about the ipsilon mailing list