[SECURITY] Fedora 24 Update: ipsilon-2.0.2-2.fc24

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2016-b465090499
2016-12-28 17:17:34.257785
--------------------------------------------------------------------------------

Name        : ipsilon
Product     : Fedora 24
Version     : 2.0.2
Release     : 2.fc24
URL         : https://fedorahosted.org/ipsilon/
Summary     : An Identity Provider Server
Description :
Ipsilon is a multi-protocol Identity Provider service. Its function is to
bridge authentication providers and applications to achieve Single Sign On
and Federation.

--------------------------------------------------------------------------------
Update Information:

New Ipsilon 2.0 release.  ----   Main changes since 1.2:  Security fix for
���CVE-2016-8638 OpenID Connect 2.0 OAuth 2 User portal with consent management
Authorization plugin support Support for adding an instance to the web root Lots
of bugfixes
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1348585 - Ipsilon form config contains wrong PAM service file
        https://bugzilla.redhat.com/show_bug.cgi?id=1348585
  [ 2 ] Bug #1346336 - New ipsilon-idp.conf doesn't work with mod_nss installed
        https://bugzilla.redhat.com/show_bug.cgi?id=1346336
  [ 3 ] Bug #1396973 - CVE-2016-8638 ipsilon: DoS via logging out all open SAML2 sessions
[fedora-all]
        https://bugzilla.redhat.com/show_bug.cgi?id=1396973
  [ 4 ] Bug #1391445 - Using ipsilon-client-install --saml-auth produces Alias /protected
/usr/share/ipsilon/ui/saml2sp
        https://bugzilla.redhat.com/show_bug.cgi?id=1391445
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade ipsilon' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------