Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 0c10760f by Salvatore Bonaccorso at 2018-03-02T13:51:50+01:00 Add temporary workaround and remove no-dsa tags for issues included in update - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== --- a/data/CVE/list +++ b/data/CVE/list @@ -316,6 +316,7 @@ CVE-2018-XXXX [SSPSA 201802-01: Check for supported signature algorithms when ca - simplesamlphp 1.15.3-1 [stretch] - simplesamlphp 1.14.11-1+deb9u1 [jessie] - simplesamlphp 1.13.1-2+deb8u1 + [wheezy] - simplesamlphp 1.9.2-1+deb7u3 NOTE: https://simplesamlphp.org/security/201802-01 NOTE: Fixed by: https://github.com/simplesamlphp/saml2/commit/88a9ae848c4b310b1c53b5700893d890999dd930 CVE-2018-7537 @@ -61580,7 +61581,6 @@ CVE-2016-9940 CVE-2016-9955 (The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before ...) - simplesamlphp 1.14.11-1 (low) [jessie] - simplesamlphp <no-dsa> (Minor issue) - [wheezy] - simplesamlphp <no-dsa> (Minor issue) NOTE: https://simplesamlphp.org/security/201612-02 NOTE: https://github.com/simplesamlphp/simplesamlphp/commit/a2326d75dd14accaac162dd2cb30aaefcc1f9205 NOTE: http://www.openwall.com/lists/oss-security/2016/12/14/7 @@ -64172,7 +64172,6 @@ CVE-2016-9815 (Xen through 4.7.x allows local ARM guest OS users to cause a deni CVE-2016-9814 (The validateSignature method in the SAML2\Utils class in SimpleSAMLphp ...) - simplesamlphp 1.14.10-1 (low) [jessie] - simplesamlphp <no-dsa> (Minor issue) - [wheezy] - simplesamlphp <no-dsa> (Minor issue) NOTE: https://simplesamlphp.org/security/201612-01 NOTE: https://github.com/simplesamlphp/saml2/pull/81 NOTE: https://github.com/simplesamlphp/saml2/commit/7008b0916426212c1cc2fc238b38ab9ebff0748c View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c10760f8940a3a488d6084316dadaa361ac85cd --- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c10760f8940a3a488d6084316dadaa361ac85cd You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ Secure-testing-commits mailing list Secure-testing-commits@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits