Rob Crittenden

**Name of the Vulnerable Software and Affected Versions** Lasso versions prior to commit 6d854cef4211cdcdbc7446c978f23ab859847cdd **Description** The issue allows remote attackers to cause a denial of service, resulting in uninitialized memory access and application crash. This is due to a problem with the `prefix` variable in the `get or define ns` function. **Recommendations** For versions prior to commit 6d854cef4211cdcdbc7446c978f23ab859847cdd, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the `get or define ns` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Ipsilon versions 0.1.0 through 1.0.1 Ipsilon versions 1.1.x prior to 1.1.1 **Description** The issue is related to improper permission checking in the `providers/saml2/admin.py` file of the Identity Provider (IdP) server. This allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP). **Recommendations** For Ipsilon versions 0.1.0 through 1.0.1, update to version 1.0.2 or later. For Ipsilon versions 1.1.x prior to 1.1.1, update to version 1.1.1 or later.

**Name of the Vulnerable Software and Affected Versions** OpenStack Oslo versions prior to 2013.2 **Description** The issue concerns the python-qpid client in OpenStack Oslo, where SSL connections are not enforced when the qpid protocol is set to ssl. This allows remote attackers to obtain sensitive information by sniffing the network. **Recommendations** For versions prior to 2013.2, update to version 2013.2 or later to resolve the issue. As a temporary workaround, consider configuring the qpid protocol to use a secure connection method. Restrict access to sensitive information until the update is applied.