Thijs Kinkhorst pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
92be510f by Thijs Kinkhorst at 2019-11-06T12:20:33Z
fix simplesamlphp
- - - - -
4 changed files:
- data/CVE/list
- data/DLA/list
- data/DSA/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -46022,7 +46022,7 @@ CVE-2019-3466
RESERVED
CVE-2019-3465
RESERVED
- - simplesamlphp <unfixed> (bug #944107)
+ - simplesamlphp 1.17.6-2 (bug #944107)
NOTE:
https://groups.google.com/forum/#!msg/simplesamlphp-announce/2odMqz63z7k/6zQQeM91EwAJ
CVE-2019-3464 (Insufficient sanitization of environment variables passed to
rsync can ...)
{DSA-4382-1 DLA-1660-1}
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[06 Nov 2019] DLA-1983-1 simplesamlphp - security update
+ {CVE-2019-3465}
+ [jessie] - simplesamlphp 1.13.1-2+deb8u3
[05 Nov 2019] DLA-1982-1 openafs - security update
{CVE-2019-18601 CVE-2019-18602 CVE-2019-18603}
[jessie] - openafs 1.6.9-2+deb8u9
=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[06 Nov 2019] DSA-4560-1 simplesamlphp - security update
+ {CVE-2019-3465}
+ [stretch] - simplesamlphp 1.14.11-1+deb9u2
+ [buster] - simplesamlphp 1.16.3-1+deb10u1
[05 Nov 2019] DSA-4559-1 proftpd-dfsg - security update
{CVE-2019-18217}
[stretch] - proftpd-dfsg 1.3.5b-4+deb9u2
=====================================
data/dsa-needed.txt
=====================================
@@ -53,8 +53,6 @@ python-ecdsa (seb)
--
python-reportlab (hle)
--
-simplesamlphp/oldstable
---
slurm-llnl (jmm)
--
smarty3/oldstable
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/92be510f4392e91055ae2d9b30bfb02ef655ab72
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/92be510f4392e91055ae2d9b30bfb02ef655ab72
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
