This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2016-10149 →
DEBIAN-CVE-2016-10149
XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or...
Original description
The description as published by the source.
XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
python-pysaml2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-5"}]}]
Debian:13
python-pysaml2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-5"}]}]
Debian:14
python-pysaml2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.0-5"}]}]
References
- advisory security-tracker.debian.org