Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5dd28064 by Salvatore Bonaccorso at 2026-08-22T08:54:50+02:00
Add two SimpleSAMLphp issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -2657,9 +2657,17 @@ CVE-2026-49424 (The Linux waitid() implementation
translates a FreeBSD siginfo_t
CVE-2026-49392 (Wazuh is a free and open source platform used for threat
prevention, d ...)
NOT-FOR-US: Wazuh
CVE-2026-49289 (The SimpleSAMLphp SAML2 library is a PHP library for SAML2
related fun ...)
- TODO: check
+ - simplesamlphp <unfixed>
+ NOTE:
https://github.com/simplesamlphp/saml2/security/advisories/GHSA-5cjr-mxj5-wmrx
+ NOTE: Fixed by:
https://github.com/simplesamlphp/saml2/commit/0043033891fdba9618386ab583e1d8afdf8aea6e
(v4.20.3)
+ NOTE: Fixed by:
https://github.com/simplesamlphp/saml2/commit/6695eb923da491f716009c2a26b34a463ac05c6b
(v4.19.3)
CVE-2026-49283 (The SimpleSAMLphp SAML2 library is a PHP library for SAML2
related fun ...)
- TODO: check
+ - simplesamlphp <unfixed>
+ NOTE:
https://github.com/simplesamlphp/saml2/security/advisories/GHSA-6929-8p9f-26jx
+ NOTE: Fixed by:
https://github.com/simplesamlphp/saml2/commit/4a71b20d8d845579fd0a54d6449c265b40db459d
(v6.2.1)
+ NOTE: Fixed by:
https://github.com/simplesamlphp/saml2/commit/a2c1ac588c70d7b7998546cf32675fb113f22a5f
(v5.0.6)
+ NOTE: Fixed by:
https://github.com/simplesamlphp/saml2/commit/e2df7992609964951b2a3e7d6566b7427b2a968f
(v4.20.2)
+ NOTE: Fixed by:
https://github.com/simplesamlphp/saml2/commit/d5c213132ef671c0018a11252322034dbddd735a
(v4.19.3)
CVE-2026-49255 (electerm is an open-sourced
terminal/ssh/sftp/telnet/serialport/RDP/VN ...)
NOT-FOR-US: electerm
CVE-2026-49253 (electerm is an open-sourced
terminal/ssh/sftp/telnet/serialport/RDP/VN ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dd28064cf164140ba365a33f6e2d53e441bfcb3
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5dd28064cf164140ba365a33f6e2d53e441bfcb3
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
