< back to search

gpp_maybe Security update for shibboleth-sp
SUSE-SLES-16.0-1329

This update for shibboleth-sp fixes the following issue - CVE-2025-9943: SQL injection in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service (bsc#1249394).

  • Release Date
    Jul 22 2026
  • References
    Bugzilla: 1249394
    CVEs: CVE-2025-9943
  • Type
    security
  • Severity
    important

cloud_download Downloads

SUSE Linux Enterprise Server 16.0 aarch64
  • Packages
    libshibsp-lite12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    libshibsp12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    shibboleth-sp
    System for attribute-based Web Single Sign On
    3.5.0-160000.3.1 lock rpm
SUSE Linux Enterprise Server 16.0 ppc64le
  • Packages
    libshibsp-lite12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    libshibsp12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    shibboleth-sp
    System for attribute-based Web Single Sign On
    3.5.0-160000.3.1 lock rpm
SUSE Linux Enterprise Server 16.0 s390x
  • Packages
    libshibsp-lite12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    libshibsp12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    shibboleth-sp
    System for attribute-based Web Single Sign On
    3.5.0-160000.3.1 lock rpm
SUSE Linux Enterprise Server 16.0 x86_64
  • Packages
    libshibsp-lite12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    libshibsp12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    shibboleth-sp
    System for attribute-based Web Single Sign On
    3.5.0-160000.3.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 ppc64le
  • Packages
    libshibsp-lite12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    libshibsp12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    shibboleth-sp
    System for attribute-based Web Single Sign On
    3.5.0-160000.3.1 lock rpm
SUSE Linux Enterprise Server for SAP applications 16.0 x86_64
  • Packages
    libshibsp-lite12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    libshibsp12
    Shared Library for Shibboleth
    3.5.0-160000.3.1 lock rpm
    shibboleth-sp
    System for attribute-based Web Single Sign On
    3.5.0-160000.3.1 lock rpm