A lasso security update has been released for Oracle Linux 7.

El-errata: ELSA-2021-2989 Important: Oracle Linux 7 lasso security update

Oracle Linux Security Advisory ELSA-2021-2989

  http://linux.oracle.com/errata/ELSA-2021-2989.html

The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:

x86_64:
lasso-2.5.1-8.el7_9.i686.rpm
lasso-2.5.1-8.el7_9.x86_64.rpm
lasso-devel-2.5.1-8.el7_9.i686.rpm
lasso-devel-2.5.1-8.el7_9.x86_64.rpm
lasso-python-2.5.1-8.el7_9.x86_64.rpm

SRPMS:
  http://oss.oracle.com/ol7/SRPMS-updates/lasso-2.5.1-8.el7_9.src.rpm

Related CVEs:

CVE-2021-28091



Description of changes:

[2.5.1-8]
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses

[2.5.1-7]
- Fix Coverity warning introduced by the previous patch
- Related: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses

[2.5.1-6]
- Resolves: #1963855 - CVE-2021-28091 lasso: XML signature wrapping
vulnerability when parsing SAML responses