Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
d43001fe by Salvatore Bonaccorso at 2019-06-26T15:18:00Z
Update information for lemonldap-ng issue
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,7 +1,9 @@
CVE-2019-XXXX [XXE vulnerability in SOAP notification server]
- - lemonldap-ng <unfixed> (bug #931117)
+ - lemonldap-ng 2.0.0+ds-1 (bug #931117)
[stretch] - lemonldap-ng <no-dsa> (Minor issue, can be fixed via point
release, notification server not enabled by default)
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1818
+ NOTE: 2.0.0 upstream replaced the (old) feature with a new REST/JSON
service, and
+ NOTE: added a "oldXMLFormat" option which is functionwise broken up to
2.0.5.
CVE-2019-12965
RESERVED
CVE-2019-12964 (LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the
ticket.php ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d43001fefb10bf20dd338614b5ba913156551621
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/d43001fefb10bf20dd338614b5ba913156551621
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
