Thijs Kinkhorst pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
00becffd by Thijs Kinkhorst at 2019-11-05T08:12:57Z
mark two older simplesamlphp issues as no-dsa
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -124337,11 +124337,13 @@ CVE-2017-12872 (The (1) Htpasswd authentication
source in the authcrypt module a
NOTE:
https://github.com/simplesamlphp/simplesamlphp/commit/caf764cc2c9b68ac29741070ebdf133a595443f1
CVE-2017-12871 (The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in
SimpleSAML ...)
- simplesamlphp 1.14.15-1
+ [stretch] - simplesamlphp <no-dsa> (Minor issue mitigated by HTTPS
usage, hard to backport)
[jessie] - simplesamlphp <not-affected> (Vulnerable code not present)
[wheezy] - simplesamlphp <not-affected> (Vulnerable code not present)
NOTE: https://simplesamlphp.org/security/201703-02
CVE-2017-12870 (SimpleSAMLphp 1.14.12 and earlier make it easier for
man-in-the-middle ...)
- simplesamlphp 1.14.15-1
+ [stretch] - simplesamlphp <no-dsa> (Minor issue mitigated by HTTPS
usage, hard to backport)
[jessie] - simplesamlphp <ignored> (Minor issue mitigated by HTTPS
usage, hard to backport)
[wheezy] - simplesamlphp <ignored> (Minor issue mitigated by HTTPS
usage, hard to backport)
NOTE: https://simplesamlphp.org/security/201704-01
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/00becffde3c7e958e9d644600c333f96262c4663
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/00becffde3c7e958e9d644600c333f96262c4663
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
