Moritz Muehlenhoff pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
f2f0f309 by Moritz Muehlenhoff at 2018-11-16T16:16:33Z
stretch triage
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -1110,6 +1110,7 @@ CVE-2018-18957 (An issue has been found in libIEC61850
v1.3. It is a stack-based
NOT-FOR-US: libIEC61850
CVE-2018-18956 (The ProcessMimeEntity function in util-decode-mime.c in
Suricata 4.x ...)
- suricata <unfixed>
+ [stretch] - suricata <no-dsa> (Minor issue)
[jessie] - suricata <not-affected> (Vulnerable code not present, no
MIME support in this version)
NOTE:
https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-October/016227.html
NOTE: https://redmine.openinfosecfoundation.org/issues/2658#change-10374
@@ -66297,6 +66298,7 @@ CVE-2017-12873 (SimpleSAMLphp 1.7.0 through 1.14.10
might allow attackers to obt
CVE-2017-12872 (The (1) Htpasswd authentication source in the authcrypt module
and (2) ...)
{DLA-1408-1 DLA-1205-1}
- simplesamlphp 1.14.15-1
+ [stretch] - simplesamlphp <no-dsa> (Minor issue)
NOTE: https://simplesamlphp.org/security/201703-01
NOTE: Patches:
https://github.com/simplesamlphp/simplesamlphp/commit/ab7761d4a523a4ed00479fb1ddba688e7ca72439
NOTE:
https://github.com/simplesamlphp/simplesamlphp/commit/caf764cc2c9b68ac29741070ebdf133a595443f1
@@ -66318,6 +66320,7 @@ CVE-2017-12869 (The multiauth module in SimpleSAMLphp
1.14.13 and earlier allows
CVE-2017-12868 (The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in
...)
{DLA-1408-1 DLA-1205-1}
- simplesamlphp 1.14.15-1
+ [stretch] - simplesamlphp <not-affected> (Only affects setups with old
PHP versions not found in stable)
NOTE: https://simplesamlphp.org/security/201705-01
NOTE: Patch:
https://github.com/simplesamlphp/simplesamlphp/commit/caf764cc2c9b68ac29741070ebdf133a595443f1
CVE-2017-12867 (The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp
1.14.14 ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -56,6 +56,8 @@ pdns
php7.0
wait until more severe issues have come up
--
+simplesamlphp
+--
smarty3
--
sssd
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f2f0f309ffad00946b79b2e0c8f89c88d2d2de43
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/f2f0f309ffad00946b79b2e0c8f89c88d2d2de43
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
