CVE-2023-36661 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-36661 Interim 1 16 2025-05-01T00:15:48Z current 2023-06-26T23:14:16Z 2025-05-01T00:15:48Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-36661 Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2023-July/015407.html E-Mail link for SUSE-SU-2023:2766-1 https://lists.suse.com/pipermail/sle-security-updates/2023-July/015641.html E-Mail link for SUSE-SU-2023:2975-1 https://lists.suse.com/pipermail/sle-updates/2023-August/030679.html E-Mail link for SUSE-SU-2023:3089-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Server 15 SP4-TERADATA SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Manager Proxy 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Retail Branch Server 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE Manager Server 4.2 SUSE Linux Enterprise Module for Server Applications 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.4 openSUSE Leap 15.5 libshibsp-lite6 libshibsp-lite7 libshibsp-lite8 libshibsp6 libshibsp7 libshibsp9 libxmltooling-devel libxmltooling-devel-1.5.6-3.13.1 libxmltooling-devel-3.1.0-150300.3.3.1 libxmltooling-lite9-3.1.0-150300.3.3.1 libxmltooling6 libxmltooling6-1.5.6-3.13.1 libxmltooling7 libxmltooling7-1.6.4-150000.3.10.1 libxmltooling9-3.1.0-150300.3.3.1 shibboleth-sp shibboleth-sp-devel xmltooling xmltooling-schemas xmltooling-schemas-1.5.6-3.13.1 xmltooling-schemas-3.1.0-150300.3.3.1 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Enterprise Storage 7.1 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Enterprise Storage 7.1 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Enterprise Storage 7.1 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Enterprise Storage 7.1 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Real Time 15 SP3 libxmltooling6-1.5.6-3.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA xmltooling-schemas-1.5.6-3.13.1 as a component of SUSE Linux Enterprise Server 12 SP3-TERADATA libxmltooling6-1.5.6-3.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 xmltooling-schemas-1.5.6-3.13.1 as a component of SUSE Linux Enterprise Server 12 SP5 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server 15 SP4-TERADATA libxmltooling6-1.5.6-3.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 xmltooling-schemas-1.5.6-3.13.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libxmltooling-devel-1.5.6-3.13.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Manager Proxy 4.2 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Manager Proxy 4.2 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Manager Proxy 4.2 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Manager Proxy 4.2 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Manager Retail Branch Server 4.2 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Manager Retail Branch Server 4.2 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Manager Retail Branch Server 4.2 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Manager Retail Branch Server 4.2 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of SUSE Manager Server 4.2 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of SUSE Manager Server 4.2 libxmltooling9-3.1.0-150300.3.3.1 as a component of SUSE Manager Server 4.2 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of SUSE Manager Server 4.2 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.4 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.4 libxmltooling7-1.6.4-150000.3.10.1 as a component of openSUSE Leap 15.4 libxmltooling9-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.4 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.4 libxmltooling-devel-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.5 libxmltooling-lite9-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.5 libxmltooling9-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.5 xmltooling-schemas-3.1.0-150300.3.3.1 as a component of openSUSE Leap 15.5 libshibsp-lite7 as a component of SUSE CaaS Platform 4.0 libshibsp7 as a component of SUSE CaaS Platform 4.0 shibboleth-sp as a component of SUSE CaaS Platform 4.0 shibboleth-sp-devel as a component of SUSE CaaS Platform 4.0 libxmltooling-devel as a component of SUSE CaaS Platform 4.0 libxmltooling7 as a component of SUSE CaaS Platform 4.0 xmltooling-schemas as a component of SUSE CaaS Platform 4.0 xmltooling as a component of SUSE CaaS Platform 4.0 shibboleth-sp as a component of SUSE Enterprise Storage 7 xmltooling as a component of SUSE Enterprise Storage 7 libshibsp-lite8 as a component of SUSE Enterprise Storage 7.1 libshibsp9 as a component of SUSE Enterprise Storage 7.1 shibboleth-sp as a component of SUSE Enterprise Storage 7.1 shibboleth-sp-devel as a component of SUSE Enterprise Storage 7.1 shibboleth-sp as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libshibsp-lite7 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libshibsp7 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS shibboleth-sp as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS shibboleth-sp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libxmltooling-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libxmltooling7 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS xmltooling as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libshibsp-lite7 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libshibsp7 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS shibboleth-sp as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS shibboleth-sp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libxmltooling-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libxmltooling7 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS xmltooling as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libshibsp-lite8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libshibsp9 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS shibboleth-sp as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS shibboleth-sp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS libshibsp-lite8 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libshibsp9 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS shibboleth-sp as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS shibboleth-sp-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS libshibsp-lite8 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libshibsp9 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 shibboleth-sp as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 shibboleth-sp-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP4 libshibsp-lite8 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libshibsp9 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 shibboleth-sp as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 shibboleth-sp-devel as a component of SUSE Linux Enterprise Module for Server Applications 15 SP5 libshibsp-lite8 as a component of SUSE Linux Enterprise Real Time 15 SP3 libshibsp9 as a component of SUSE Linux Enterprise Real Time 15 SP3 shibboleth-sp as a component of SUSE Linux Enterprise Real Time 15 SP3 shibboleth-sp-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 libshibsp-lite6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libshibsp6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL shibboleth-sp as a component of SUSE Linux Enterprise Server 12 SP2-BCL libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP2-BCL xmltooling as a component of SUSE Linux Enterprise Server 12 SP2-BCL libshibsp-lite6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libshibsp6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS shibboleth-sp as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xmltooling as a component of SUSE Linux Enterprise Server 12 SP2-LTSS libshibsp-lite6 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libshibsp6 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS shibboleth-sp as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xmltooling as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libshibsp-lite6 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libshibsp6 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS shibboleth-sp as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libxmltooling6 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xmltooling as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libshibsp-lite6 as a component of SUSE Linux Enterprise Server 12 SP5 libshibsp6 as a component of SUSE Linux Enterprise Server 12 SP5 shibboleth-sp as a component of SUSE Linux Enterprise Server 12 SP5 libshibsp-lite7 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libshibsp7 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS shibboleth-sp as a component of SUSE Linux Enterprise Server 15 SP1-LTSS shibboleth-sp-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libxmltooling-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libxmltooling7 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 15 SP1-LTSS xmltooling as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libshibsp-lite7 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libshibsp7 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS shibboleth-sp as a component of SUSE Linux Enterprise Server 15 SP2-LTSS shibboleth-sp-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libxmltooling-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libxmltooling7 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 15 SP2-LTSS xmltooling as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libshibsp-lite8 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libshibsp9 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS shibboleth-sp as a component of SUSE Linux Enterprise Server 15 SP3-LTSS shibboleth-sp-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS libshibsp-lite7 as a component of SUSE Linux Enterprise Server 15-LTSS libshibsp7 as a component of SUSE Linux Enterprise Server 15-LTSS shibboleth-sp as a component of SUSE Linux Enterprise Server 15-LTSS shibboleth-sp-devel as a component of SUSE Linux Enterprise Server 15-LTSS libxmltooling-devel as a component of SUSE Linux Enterprise Server 15-LTSS libxmltooling7 as a component of SUSE Linux Enterprise Server 15-LTSS xmltooling-schemas as a component of SUSE Linux Enterprise Server 15-LTSS xmltooling as a component of SUSE Linux Enterprise Server 15-LTSS shibboleth-sp as a component of SUSE Linux Enterprise Server Teradata 12 SP3 shibboleth-sp as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS xmltooling as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS libshibsp-lite6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libshibsp6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 shibboleth-sp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libxmltooling6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xmltooling-schemas as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 libshibsp-lite6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libshibsp6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 shibboleth-sp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libxmltooling6 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xmltooling-schemas as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 shibboleth-sp as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libshibsp-lite7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libshibsp7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 shibboleth-sp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 shibboleth-sp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libxmltooling-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libxmltooling7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xmltooling-schemas as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libshibsp-lite7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libshibsp7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 shibboleth-sp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 shibboleth-sp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libxmltooling-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libxmltooling7 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmltooling-schemas as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 xmltooling as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libshibsp-lite8 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 libshibsp9 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 shibboleth-sp as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 shibboleth-sp-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 shibboleth-sp-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 shibboleth-sp as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 libshibsp-lite8 as a component of SUSE Manager Proxy 4.2 libshibsp9 as a component of SUSE Manager Proxy 4.2 shibboleth-sp as a component of SUSE Manager Proxy 4.2 shibboleth-sp-devel as a component of SUSE Manager Proxy 4.2 libshibsp-lite8 as a component of SUSE Manager Retail Branch Server 4.2 libshibsp9 as a component of SUSE Manager Retail Branch Server 4.2 shibboleth-sp as a component of SUSE Manager Retail Branch Server 4.2 shibboleth-sp-devel as a component of SUSE Manager Retail Branch Server 4.2 libshibsp-lite8 as a component of SUSE Manager Server 4.2 libshibsp9 as a component of SUSE Manager Server 4.2 shibboleth-sp as a component of SUSE Manager Server 4.2 shibboleth-sp-devel as a component of SUSE Manager Server 4.2 libshibsp-lite6 as a component of SUSE OpenStack Cloud 9 libshibsp6 as a component of SUSE OpenStack Cloud 9 shibboleth-sp as a component of SUSE OpenStack Cloud 9 libxmltooling6 as a component of SUSE OpenStack Cloud 9 xmltooling-schemas as a component of SUSE OpenStack Cloud 9 xmltooling as a component of SUSE OpenStack Cloud 9 libshibsp-lite6 as a component of SUSE OpenStack Cloud Crowbar 9 libshibsp6 as a component of SUSE OpenStack Cloud Crowbar 9 shibboleth-sp as a component of SUSE OpenStack Cloud Crowbar 9 libxmltooling6 as a component of SUSE OpenStack Cloud Crowbar 9 xmltooling-schemas as a component of SUSE OpenStack Cloud Crowbar 9 xmltooling as a component of SUSE OpenStack Cloud Crowbar 9 Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.) CVE-2023-36661 SUSE Enterprise Storage 7.1:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Enterprise Storage 7.1:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Enterprise Storage 7.1:libxmltooling9-3.1.0-150300.3.3.1 SUSE Enterprise Storage 7.1:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP6:libxmltooling7-1.6.4-150000.3.10.1 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP7:libxmltooling7-1.6.4-150000.3.10.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP4:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Module for Server Applications 15 SP5:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise Real Time 15 SP3:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise Real Time 15 SP3:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Real Time 15 SP3:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Real Time 15 SP3:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:libxmltooling6-1.5.6-3.13.1 SUSE Linux Enterprise Server 12 SP3-TERADATA:xmltooling-schemas-1.5.6-3.13.1 SUSE Linux Enterprise Server 12 SP5:libxmltooling6-1.5.6-3.13.1 SUSE Linux Enterprise Server 12 SP5:xmltooling-schemas-1.5.6-3.13.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 15 SP3-LTSS:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server 15 SP4-TERADATA:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:libxmltooling6-1.5.6-3.13.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:xmltooling-schemas-1.5.6-3.13.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libxmltooling9-3.1.0-150300.3.3.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:libxmltooling-devel-1.5.6-3.13.1 SUSE Manager Proxy 4.2:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Manager Proxy 4.2:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Manager Proxy 4.2:libxmltooling9-3.1.0-150300.3.3.1 SUSE Manager Proxy 4.2:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Manager Retail Branch Server 4.2:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Manager Retail Branch Server 4.2:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Manager Retail Branch Server 4.2:libxmltooling9-3.1.0-150300.3.3.1 SUSE Manager Retail Branch Server 4.2:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE Manager Server 4.2:libxmltooling-devel-3.1.0-150300.3.3.1 SUSE Manager Server 4.2:libxmltooling-lite9-3.1.0-150300.3.3.1 SUSE Manager Server 4.2:libxmltooling9-3.1.0-150300.3.3.1 SUSE Manager Server 4.2:xmltooling-schemas-3.1.0-150300.3.3.1 openSUSE Leap 15.4:libxmltooling-devel-3.1.0-150300.3.3.1 openSUSE Leap 15.4:libxmltooling-lite9-3.1.0-150300.3.3.1 openSUSE Leap 15.4:libxmltooling7-1.6.4-150000.3.10.1 openSUSE Leap 15.4:libxmltooling9-3.1.0-150300.3.3.1 openSUSE Leap 15.4:xmltooling-schemas-3.1.0-150300.3.3.1 openSUSE Leap 15.5:libxmltooling-devel-3.1.0-150300.3.3.1 openSUSE Leap 15.5:libxmltooling-lite9-3.1.0-150300.3.3.1 openSUSE Leap 15.5:libxmltooling9-3.1.0-150300.3.3.1 openSUSE Leap 15.5:xmltooling-schemas-3.1.0-150300.3.3.1 SUSE CaaS Platform 4.0:libshibsp-lite7 SUSE CaaS Platform 4.0:libshibsp7 SUSE CaaS Platform 4.0:shibboleth-sp SUSE CaaS Platform 4.0:shibboleth-sp-devel SUSE Enterprise Storage 7.1:libshibsp-lite8 SUSE Enterprise Storage 7.1:libshibsp9 SUSE Enterprise Storage 7.1:shibboleth-sp SUSE Enterprise Storage 7.1:shibboleth-sp-devel SUSE Enterprise Storage 7:shibboleth-sp SUSE Linux Enterprise High Performance Computing 12 SP5:shibboleth-sp SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libshibsp-lite7 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libshibsp7 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:shibboleth-sp SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:shibboleth-sp-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libshibsp-lite7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libshibsp7 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:shibboleth-sp SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:shibboleth-sp-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libshibsp-lite8 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:libshibsp9 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:shibboleth-sp SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:shibboleth-sp-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libshibsp-lite8 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:libshibsp9 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:shibboleth-sp SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:shibboleth-sp-devel SUSE Linux Enterprise Module for Server Applications 15 SP4:libshibsp-lite8 SUSE Linux Enterprise Module for Server Applications 15 SP4:libshibsp9 SUSE Linux Enterprise Module for Server Applications 15 SP4:shibboleth-sp SUSE Linux Enterprise Module for Server Applications 15 SP4:shibboleth-sp-devel SUSE Linux Enterprise Module for Server Applications 15 SP5:libshibsp-lite8 SUSE Linux Enterprise Module for Server Applications 15 SP5:libshibsp9 SUSE Linux Enterprise Module for Server Applications 15 SP5:shibboleth-sp SUSE Linux Enterprise Module for Server Applications 15 SP5:shibboleth-sp-devel SUSE Linux Enterprise Real Time 15 SP3:libshibsp-lite8 SUSE Linux Enterprise Real Time 15 SP3:libshibsp9 SUSE Linux Enterprise Real Time 15 SP3:shibboleth-sp SUSE Linux Enterprise Real Time 15 SP3:shibboleth-sp-devel SUSE Linux Enterprise Server 12 SP2-BCL:libshibsp-lite6 SUSE Linux Enterprise Server 12 SP2-BCL:libshibsp6 SUSE Linux Enterprise Server 12 SP2-BCL:shibboleth-sp SUSE Linux Enterprise Server 12 SP2-LTSS:libshibsp-lite6 SUSE Linux Enterprise Server 12 SP2-LTSS:libshibsp6 SUSE Linux Enterprise Server 12 SP2-LTSS:shibboleth-sp SUSE Linux Enterprise Server 12 SP4-ESPOS:libshibsp-lite6 SUSE Linux Enterprise Server 12 SP4-ESPOS:libshibsp6 SUSE Linux Enterprise Server 12 SP4-ESPOS:shibboleth-sp SUSE Linux Enterprise Server 12 SP4-LTSS:libshibsp-lite6 SUSE Linux Enterprise Server 12 SP4-LTSS:libshibsp6 SUSE Linux Enterprise Server 12 SP4-LTSS:shibboleth-sp SUSE Linux Enterprise Server 12 SP5:libshibsp-lite6 SUSE Linux Enterprise Server 12 SP5:libshibsp6 SUSE Linux Enterprise Server 12 SP5:shibboleth-sp SUSE Linux Enterprise Server 15 SP1-LTSS:libshibsp-lite7 SUSE Linux Enterprise Server 15 SP1-LTSS:libshibsp7 SUSE Linux Enterprise Server 15 SP1-LTSS:shibboleth-sp SUSE Linux Enterprise Server 15 SP1-LTSS:shibboleth-sp-devel SUSE Linux Enterprise Server 15 SP2-LTSS:libshibsp-lite7 SUSE Linux Enterprise Server 15 SP2-LTSS:libshibsp7 SUSE Linux Enterprise Server 15 SP2-LTSS:shibboleth-sp SUSE Linux Enterprise Server 15 SP2-LTSS:shibboleth-sp-devel SUSE Linux Enterprise Server 15 SP3-LTSS:libshibsp-lite8 SUSE Linux Enterprise Server 15 SP3-LTSS:libshibsp9 SUSE Linux Enterprise Server 15 SP3-LTSS:shibboleth-sp SUSE Linux Enterprise Server 15 SP3-LTSS:shibboleth-sp-devel SUSE Linux Enterprise Server 15-LTSS:libshibsp-lite7 SUSE Linux Enterprise Server 15-LTSS:libshibsp7 SUSE Linux Enterprise Server 15-LTSS:shibboleth-sp SUSE Linux Enterprise Server 15-LTSS:shibboleth-sp-devel SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:shibboleth-sp SUSE Linux Enterprise Server Teradata 12 SP3:shibboleth-sp SUSE Linux Enterprise Server for SAP Applications 12 SP2:libshibsp-lite6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:libshibsp6 SUSE Linux Enterprise Server for SAP Applications 12 SP2:shibboleth-sp SUSE Linux Enterprise Server for SAP Applications 12 SP4:libshibsp-lite6 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libshibsp6 SUSE Linux Enterprise Server for SAP Applications 12 SP4:shibboleth-sp SUSE Linux Enterprise Server for SAP Applications 12 SP5:shibboleth-sp SUSE Linux Enterprise Server for SAP Applications 15 SP1:libshibsp-lite7 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libshibsp7 SUSE Linux Enterprise Server for SAP Applications 15 SP1:shibboleth-sp SUSE Linux Enterprise Server for SAP Applications 15 SP1:shibboleth-sp-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:libshibsp-lite7 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libshibsp7 SUSE Linux Enterprise Server for SAP Applications 15 SP2:shibboleth-sp SUSE Linux Enterprise Server for SAP Applications 15 SP2:shibboleth-sp-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:libshibsp-lite8 SUSE Linux Enterprise Server for SAP Applications 15 SP3:libshibsp9 SUSE Linux Enterprise Server for SAP Applications 15 SP3:shibboleth-sp SUSE Linux Enterprise Server for SAP Applications 15 SP3:shibboleth-sp-devel SUSE Linux Enterprise Software Development Kit 12 SP5:shibboleth-sp SUSE Linux Enterprise Software Development Kit 12 SP5:shibboleth-sp-devel SUSE Manager Proxy 4.2:libshibsp-lite8 SUSE Manager Proxy 4.2:libshibsp9 SUSE Manager Proxy 4.2:shibboleth-sp SUSE Manager Proxy 4.2:shibboleth-sp-devel SUSE Manager Retail Branch Server 4.2:libshibsp-lite8 SUSE Manager Retail Branch Server 4.2:libshibsp9 SUSE Manager Retail Branch Server 4.2:shibboleth-sp SUSE Manager Retail Branch Server 4.2:shibboleth-sp-devel SUSE Manager Server 4.2:libshibsp-lite8 SUSE Manager Server 4.2:libshibsp9 SUSE Manager Server 4.2:shibboleth-sp SUSE Manager Server 4.2:shibboleth-sp-devel SUSE OpenStack Cloud 9:libshibsp-lite6 SUSE OpenStack Cloud 9:libshibsp6 SUSE OpenStack Cloud 9:shibboleth-sp SUSE OpenStack Cloud Crowbar 9:libshibsp-lite6 SUSE OpenStack Cloud Crowbar 9:libshibsp6 SUSE OpenStack Cloud Crowbar 9:shibboleth-sp moderate 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L