Thijs Kinkhorst pushed to branch master at Debian Security Tracker / security-tracker
Commits: 83fa7cd1 by Thijs Kinkhorst at 2018-03-02T11:03:30+00:00 take simplesamlphp - - - - - cd4f5ba9 by Thijs Kinkhorst at 2018-03-02T11:04:35+00:00 Reserve DLA-1297-1 for simplesamlphp - - - - - 3 changed files: - data/CVE/list - data/DLA/list - data/dla-needed.txt Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -3311,7 +3311,8 @@ CVE-2018-6520 (SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an CVE-2018-6519 (The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 ...) {DSA-4127-1} - simplesamlphp 1.15.2-1 - [wheezy] - simplesamlphp <ignored> (Minor issue) + [wheezy] - simplesamlphp <not-affected> (Vulnerable code not present) + NOTE: minor issue NOTE: https://simplesamlphp.org/security/201801-01 NOTE: The issue lies in the simplesamlphp/saml2 part, which is NOTE: updated in 1.15.2 to the respective fixed version. ===================================== data/DLA/list ===================================== --- a/data/DLA/list +++ b/data/DLA/list @@ -1,3 +1,6 @@ +[02 Mar 2018] DLA-1297-1 simplesamlphp - security update + {CVE-2016-9814 CVE-2016-9955} + [wheezy] - simplesamlphp 1.9.2-1+deb7u3 [28 Feb 2018] DLA-1296-1 xmltooling - security update {CVE-2018-0489} [wheezy] - xmltooling 1.4.2-5+deb7u3 ===================================== data/dla-needed.txt ===================================== --- a/data/dla-needed.txt +++ b/data/dla-needed.txt @@ -92,9 +92,6 @@ ruby1.9.1 (Emilio Pozuelo) -- rubygems (Emilio Pozuelo) -- -simplesamlphp - NOTE: 20180227: details under embargo (anarcat) --- tiff NOTE: incomplete fix of CVE-2017-18013 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/366e3247b0f3d085442dd659e365ffbb2a0d025a...cd4f5ba9ac2d21733fd29d910b89bb70745d01b8 --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/366e3247b0f3d085442dd659e365ffbb2a0d025a...cd4f5ba9ac2d21733fd29d910b89bb70745d01b8 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits