Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
b5caca76 by Salvatore Bonaccorso at 2021-06-01T17:55:43+02:00
Add CVE-2021-28091/lasso
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13543,8 +13543,11 @@ CVE-2021-28092 (The is-svg package 2.1.0 through 4.2.1
for Node.js uses a regula
CVE-2021-3424
RESERVED
NOT-FOR-US: Keycloak
-CVE-2021-28091
+CVE-2021-28091 [XML signature wrapping vulnerability when parsing SAML
responses]
RESERVED
+ - lasso 2.6.1-3
+ NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1940089
+ NOTE:
https://git.entrouvert.org/lasso.git/commit/?id=ea7e5efe9741e1b1787a58af16cb15b40c23be5a
CVE-2021-28090 (Tor before 0.4.5.7 allows a remote attacker to cause Tor
directory aut ...)
{DSA-4871-1}
- tor 0.4.5.7-1
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5caca7628b0decd0b959ac841d7f2197e6294e5
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5caca7628b0decd0b959ac841d7f2197e6294e5
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
