Issued:

2015-07-22

Updated:

2015-07-22

RHBA-2015:1253 - lasso bug fix update

Synopsis

lasso bug fix update

Type/Severity

Bug Fix Advisory None

Topic

Updated lasso packages that fix two bugs are now available for Red Hat Enterprise Linux 6.

Description

The lasso packages provide the Lasso library that implements the Liberty Alliance Single Sign-On standards, including the SAML and SAML2 specifications. It allows handling of the whole life-cycle of SAML-based federations and provides bindings for multiple languages.

This update fixes the following bugs:

• Users of the lasso packages could previously experience several problems related to Red Hat Enterprise Linux interoperability with Microsoft Active Directory Federation Services (ADFS). Authentication against ADFS failed when using the mod_auth_mellon module. In addition, in Apache sessions, the limit for the number of elements was insufficient and multi-value variables were not supported. Also, the MellonCond parameter did not work when used together with the MellonSetEnv(NoPrefix) parameter. This update fixes the above described problems with ADFS interoperability. (BZ#1160636, BZ#1167796)

Users of lasso are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Updated Packages

• lasso-devel-2.4.0-6.el6.s390x.rpm
• lasso-devel-2.4.0-6.el6.ppc64.rpm
• lasso-python-2.4.0-6.el6.i686.rpm
• lasso-debuginfo-2.4.0-6.el6.ppc64.rpm
• lasso-debuginfo-2.4.0-6.el6.ppc.rpm
• mod_auth_mellon-debuginfo-0.8.0-4.el6.i686.rpm
• lasso-python-2.4.0-6.el6.x86_64.rpm
• lasso-2.4.0-6.el6.ppc.rpm
• mod_auth_mellon-debuginfo-0.8.0-4.el6.s390x.rpm
• lasso-debuginfo-2.4.0-6.el6.x86_64.rpm
• mod_auth_mellon-0.8.0-4.el6.src.rpm
• lasso-devel-2.4.0-6.el6.x86_64.rpm
• lasso-devel-2.4.0-6.el6.i686.rpm
• mod_auth_mellon-0.8.0-4.el6.x86_64.rpm
• lasso-2.4.0-6.el6.s390x.rpm
• mod_auth_mellon-0.8.0-4.el6.s390x.rpm
• mod_auth_mellon-debuginfo-0.8.0-4.el6.x86_64.rpm
• lasso-debuginfo-2.4.0-6.el6.s390.rpm
• mod_auth_mellon-0.8.0-4.el6.ppc64.rpm
• lasso-2.4.0-6.el6.ppc64.rpm
• lasso-2.4.0-6.el6.src.rpm
• mod_auth_mellon-debuginfo-0.8.0-4.el6.ppc64.rpm
• lasso-python-2.4.0-6.el6.s390x.rpm
• lasso-2.4.0-6.el6.s390.rpm
• mod_auth_mellon-0.8.0-4.el6.i686.rpm
• lasso-devel-2.4.0-6.el6.s390.rpm
• lasso-devel-2.4.0-6.el6.ppc.rpm
• lasso-debuginfo-2.4.0-6.el6.i686.rpm
• lasso-python-2.4.0-6.el6.ppc64.rpm
• lasso-2.4.0-6.el6.i686.rpm
• lasso-2.4.0-6.el6.x86_64.rpm
• lasso-debuginfo-2.4.0-6.el6.s390x.rpm

Fixes

• This content is not included.BZ - 1160636
• This content is not included.BZ - 1167796

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.