Bug 48118 - Update simpleSAMLphp to 1.16
Update simpleSAMLphp to 1.16
Status: RESOLVED DUPLICATE of bug 48961
Product: UCS
Classification: Unclassified
Component: SAML
UCS 4.3
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2018-11-08 10:12 CET by Nico Gulden
Modified: 2019-03-30 08:09 CET (History)
1 user (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 2: Improvement: Would be a product improvement
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 2: A Pain – users won’t like this once they notice it
User Pain: 0.046
Enterprise Customer affected?:
School Customer affected?:
ISV affected?: Yes
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional): SAML, Security
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Nico Gulden univentionstaff 2018-11-08 10:12:23 CET
The current simpleSAMLphp is with version 1.14 quite old. Namespaces have been introduced with version 1.15. An app provider needs to use namespaces with SAML in their plugin.

Furthermore, the new version fixes security vulnerabilities: https://simplesamlphp.org/security
Comment 1 Florian Best univentionstaff 2019-03-30 08:09:28 CET

*** This bug has been marked as a duplicate of bug 48961 ***