Thijs Kinkhorst pushed to branch master at Debian Security Tracker / security-tracker
Commits: 92be510f by Thijs Kinkhorst at 2019-11-06T12:20:33Z fix simplesamlphp - - - - - 4 changed files: - data/CVE/list - data/DLA/list - data/DSA/list - data/dsa-needed.txt Changes: ===================================== data/CVE/list ===================================== @@ -46022,7 +46022,7 @@ CVE-2019-3466 RESERVED CVE-2019-3465 RESERVED - - simplesamlphp <unfixed> (bug #944107) + - simplesamlphp 1.17.6-2 (bug #944107) NOTE: https://groups.google.com/forum/#!msg/simplesamlphp-announce/2odMqz63z7k/6zQQeM91EwAJ CVE-2019-3464 (Insufficient sanitization of environment variables passed to rsync can ...) {DSA-4382-1 DLA-1660-1} ===================================== data/DLA/list ===================================== @@ -1,3 +1,6 @@ +[06 Nov 2019] DLA-1983-1 simplesamlphp - security update + {CVE-2019-3465} + [jessie] - simplesamlphp 1.13.1-2+deb8u3 [05 Nov 2019] DLA-1982-1 openafs - security update {CVE-2019-18601 CVE-2019-18602 CVE-2019-18603} [jessie] - openafs 1.6.9-2+deb8u9 ===================================== data/DSA/list ===================================== @@ -1,3 +1,7 @@ +[06 Nov 2019] DSA-4560-1 simplesamlphp - security update + {CVE-2019-3465} + [stretch] - simplesamlphp 1.14.11-1+deb9u2 + [buster] - simplesamlphp 1.16.3-1+deb10u1 [05 Nov 2019] DSA-4559-1 proftpd-dfsg - security update {CVE-2019-18217} [stretch] - proftpd-dfsg 1.3.5b-4+deb9u2 ===================================== data/dsa-needed.txt ===================================== @@ -53,8 +53,6 @@ python-ecdsa (seb) -- python-reportlab (hle) -- -simplesamlphp/oldstable --- slurm-llnl (jmm) -- smarty3/oldstable View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/92be510f4392e91055ae2d9b30bfb02ef655ab72 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/92be510f4392e91055ae2d9b30bfb02ef655ab72 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits