CVE-2021-28091

概要

参考情報

• listes.entrouvert.com/arc/lasso · Product
• git.entrouvert.org/lasso.git/commit · Patch
• git.entrouvert.org/lasso.git/tree/NEWS · Release Notes
• lists.debian.org/debian-lts-announce/2021/06/msg00013.html · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SI4YAQF4VEV2KHQ6OXXZL7CJK7IZQ3EG
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YSVWOHBBWLI2RB5C6TXINFEJRT4YSD3D
• debian.org/security/2021/dsa-4926 · Third Party Advisory

lasso のその他の脆弱性

• CVE-2025-47151緊急 9.8A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A special…
• CVE-2025-46784高 7.5A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A spe…
• CVE-2025-46705高 7.5A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially cra…
• CVE-2025-46404高 7.5A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A special…
• CVE-2015-1783高 7.5The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd allows remote attackers…