Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0c10760f by Salvatore Bonaccorso at 2018-03-02T13:51:50+01:00
Add temporary workaround and remove no-dsa tags for issues included in update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -316,6 +316,7 @@ CVE-2018-XXXX [SSPSA 201802-01: Check for supported
signature algorithms when ca
- simplesamlphp 1.15.3-1
[stretch] - simplesamlphp 1.14.11-1+deb9u1
[jessie] - simplesamlphp 1.13.1-2+deb8u1
+ [wheezy] - simplesamlphp 1.9.2-1+deb7u3
NOTE: https://simplesamlphp.org/security/201802-01
NOTE: Fixed by:
https://github.com/simplesamlphp/saml2/commit/88a9ae848c4b310b1c53b5700893d890999dd930
CVE-2018-7537
@@ -61580,7 +61581,6 @@ CVE-2016-9940
CVE-2016-9955 (The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp
before ...)
- simplesamlphp 1.14.11-1 (low)
[jessie] - simplesamlphp <no-dsa> (Minor issue)
- [wheezy] - simplesamlphp <no-dsa> (Minor issue)
NOTE: https://simplesamlphp.org/security/201612-02
NOTE:
https://github.com/simplesamlphp/simplesamlphp/commit/a2326d75dd14accaac162dd2cb30aaefcc1f9205
NOTE: http://www.openwall.com/lists/oss-security/2016/12/14/7
@@ -64172,7 +64172,6 @@ CVE-2016-9815 (Xen through 4.7.x allows local ARM guest
OS users to cause a deni
CVE-2016-9814 (The validateSignature method in the SAML2\Utils class in
SimpleSAMLphp ...)
- simplesamlphp 1.14.10-1 (low)
[jessie] - simplesamlphp <no-dsa> (Minor issue)
- [wheezy] - simplesamlphp <no-dsa> (Minor issue)
NOTE: https://simplesamlphp.org/security/201612-01
NOTE: https://github.com/simplesamlphp/saml2/pull/81
NOTE:
https://github.com/simplesamlphp/saml2/commit/7008b0916426212c1cc2fc238b38ab9ebff0748c
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c10760f8940a3a488d6084316dadaa361ac85cd
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c10760f8940a3a488d6084316dadaa361ac85cd
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
