It was discovered that ruby-saml, a SAML library implementing the client side of a SAML authorization, does not properly verify the signature of the SAML Response, which could result in bypass of authentication in an application using the ruby-saml library.
https://security-tracker.debian.org/tracker/DSA-5774-1
Continue reading...
https://security-tracker.debian.org/tracker/DSA-5774-1
Continue reading...

