CVE catalog

CVE-2025-9943

Shibboleth vulnerability

[CVE catalog]

Severity
Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.41% · Oct 25, 2026

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database, if the database connection is configured to use the ODBC plugin. The vulnerability arises from insufficient escaping of single quotes in the class SQLString (file odbc-store.cpp, lines 253-271). This issue affects Shibboleth Service Provider through 3.5.0.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianshibboleth-spsid3.5.2+dfsg-1fixed
Debianshibboleth-spforky3.5.2+dfsg-1fixed
Debianshibboleth-sptrixie3.5.0+dfsg-2+deb13u1fixed
Debianshibboleth-sptrixie-security3.5.0+dfsg-2+deb13u1fixed
Debianshibboleth-spbookworm3.4.1+dfsg-2+deb12u1fixed
Debianshibboleth-spbookworm-security3.4.1+dfsg-2+deb12u1fixed
Ubuntushibboleth-spnoble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntulibapache2-mod-shibnoble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntulibshibsp-devnoble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntulibshibsp-docnoble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntulibshibsp-pluginsnoble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntulibshibsp11t64noble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntushibboleth-sp-commonnoble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntushibboleth-sp-utilsnoble3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntushibboleth-sppro3.4.1+dfsg-2vulnerable
Ubuntushibboleth-sppro3.4.1+dfsg-2.1vulnerable
Ubuntushibboleth-sppro3.4.1+dfsg-2.1build1vulnerable
Ubuntushibboleth-sppro3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntushibboleth-sppro3.4.1+dfsg-2vulnerable
Ubuntushibboleth-sppro3.4.1+dfsg-2.1vulnerable
Ubuntushibboleth-sppro3.4.1+dfsg-2.1build1vulnerable
Ubuntushibboleth-sppro3.4.1+dfsg-2.1ubuntu0.1~esm1fixed
Ubuntushibboleth-sp25.103.5.0+dfsg-2vulnerable
Suseshibboleth-splinux enterprise server 16.03.5.0-160000.3.1fixed
Suseshibboleth-splinux enterprise server for sap applications 16.03.5.0-160000.3.1fixed
Opensuseshibboleth-spleap 16.03.5.0-160000.3.1fixed
Suseshibboleth-splinux enterprise module for server applications 15 sp73.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise high performance computing 15 sp4-espos3.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise high performance computing 15 sp4-ltss3.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise high performance computing 15 sp5-espos3.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise high performance computing 15 sp5-ltss3.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise server 15 sp4-ltss3.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise server 15 sp5-ltss3.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise server 15 sp6-ltss3.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise server for sap applications 15 sp43.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise server for sap applications 15 sp53.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise server for sap applications 15 sp63.1.0-150300.3.6.1fixed
Suseshibboleth-splinux enterprise server 12 sp5-ltss2.5.5-6.9.1fixed
Suseshibboleth-splinux enterprise server ltss extended security 12 sp52.5.5-6.9.1fixed
Opensuseshibboleth-sptumbleweed3.5.1-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianshibboleth-spsourcesid3.5.1+dfsg-1not yet assignedNot reported[1114506]
Debianshibboleth-spsourceforky3.5.1+dfsg-1not yet assignedNot reported[1114506]
Debianshibboleth-spsourcetrixie3.5.0+dfsg-2+deb13u1not yet assignedNot reported[1114506]
Debianshibboleth-spsourcebookworm3.4.1+dfsg-2+deb12u1not yet assignedNot reported[1114506]
Ubuntushibboleth-spdebnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibapache2-mod-shibdebnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibshibsp-devdebnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibshibsp-docdebnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibshibsp-pluginsdebnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntulibshibsp11t64debnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntushibboleth-sp-commondebnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntushibboleth-sp-utilsdebnoble3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedNot reportedNot reported
Ubuntushibboleth-spdebpro3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedUSN-8768-1Not reported
Ubuntushibboleth-spdebpro3.4.1+dfsg-2.1ubuntu0.1~esm1Not reportedUBUNTU-CVE-2025-9943Not reported
Suseshibboleth-sprpmlinux enterprise server 16.03.5.0-160000.3.1Not reportedSUSE-SU-2026:22854-1Not reported
Suseshibboleth-sprpmlinux enterprise server for sap applications 16.03.5.0-160000.3.1Not reportedSUSE-SU-2026:22854-1Not reported
Opensuseshibboleth-sprpmleap 16.03.5.0-160000.3.1Not reportedOPENSUSE-SU-2026:21418-1Not reported
Suseshibboleth-sprpmlinux enterprise module for server applications 15 sp73.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise high performance computing 15 sp4-espos3.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise high performance computing 15 sp4-ltss3.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise high performance computing 15 sp5-espos3.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise high performance computing 15 sp5-ltss3.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise server 15 sp4-ltss3.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise server 15 sp5-ltss3.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise server 15 sp6-ltss3.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise server for sap applications 15 sp43.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise server for sap applications 15 sp53.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise server for sap applications 15 sp63.1.0-150300.3.6.1Not reportedSUSE-SU-2026:3123-1Not reported
Suseshibboleth-sprpmlinux enterprise server 12 sp5-ltss2.5.5-6.9.1Not reportedSUSE-SU-2026:3098-1Not reported
Suseshibboleth-sprpmlinux enterprise server ltss extended security 12 sp52.5.5-6.9.1Not reportedSUSE-SU-2026:3098-1Not reported
Opensuseshibboleth-sprpmtumbleweed3.5.1-1.1Not reportedOPENSUSE-SU-2025:15714-1Not reported

[Debian bug #1114506]

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [libshibsp12]Unknown

    Source package: [shibboleth-sp]

    Details (1)

    • 3.5.1-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 3.5.1-1.1

      Version impact unknown

      usn · shibboleth-sp · opensuse · tumbleweed

  • [libshibsp-lite12]Unknown

    Source package: [shibboleth-sp]

    Details (1)

    • 3.5.1-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 3.5.1-1.1

      Version impact unknown

      usn · shibboleth-sp · opensuse · tumbleweed

  • [shibboleth-sp-devel]Unknown

    Source package: [shibboleth-sp]

    Details (1)

    • 3.5.1-2.3 · x86_64 · tumbleweed

      Unknown · Fixed: 3.5.1-1.1

      Version impact unknown

      usn · shibboleth-sp · opensuse · tumbleweed

  • [shibboleth-sp]Fixed

    Source package: [shibboleth-sp]

    Details (1)

    • 3.5.1-2.3 · x86_64 · tumbleweed

      Fixed · Fixed: 3.5.1-1.1

      usn · shibboleth-sp · opensuse · tumbleweed

[Debian 12 (Bookworm)]

  • [libapache2-mod-shib]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

  • [libshibsp11]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

  • [libshibsp-dev]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

  • [libshibsp-doc]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

  • [libshibsp-plugins]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

  • [shibboleth-sp-common]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · all · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

  • [shibboleth-sp-utils]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

    • 3.4.1+dfsg-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 3.4.1+dfsg-2+deb12u1

      usn · shibboleth-sp · debian · bookworm; usn · shibboleth-sp · debian · 12

[Debian 13 (Trixie)]

  • [libapache2-mod-shib]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

  • [libshibsp12]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

  • [libshibsp-dev]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

  • [libshibsp-doc]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.5.0+dfsg-2+deb13u1 · all · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · all · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · all · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · all · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

  • [libshibsp-plugins]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

  • [shibboleth-sp-common]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.5.0+dfsg-2+deb13u1 · all · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · all · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · all · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · all · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

  • [shibboleth-sp-utils]Fixed

    Source package: [shibboleth-sp]

    Details (4)

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

    • 3.5.0+dfsg-2+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 3.5.0+dfsg-2+deb13u1

      usn · shibboleth-sp · debian · 13

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]