It was discovered that PySAML2 incorrectly handled certain SAML XML requests and responses. A remote attacker could use this issue to read arbitrary files.
{ "availability": "No subscription required", "binaries": [ { "python-pysaml2-doc": "3.0.0-3ubuntu1.16.04.1", "python3-pysaml2": "3.0.0-3ubuntu1.16.04.1", "python-pysaml2": "3.0.0-3ubuntu1.16.04.1" } ] }