Thijs Kinkhorst pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
83fa7cd1 by Thijs Kinkhorst at 2018-03-02T11:03:30+00:00
take simplesamlphp
- - - - -
cd4f5ba9 by Thijs Kinkhorst at 2018-03-02T11:04:35+00:00
Reserve DLA-1297-1 for simplesamlphp
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3311,7 +3311,8 @@ CVE-2018-6520 (SimpleSAMLphp before 1.15.2 allows remote
attackers to bypass an
CVE-2018-6519 (The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x
before 3.1.1 ...)
{DSA-4127-1}
- simplesamlphp 1.15.2-1
- [wheezy] - simplesamlphp <ignored> (Minor issue)
+ [wheezy] - simplesamlphp <not-affected> (Vulnerable code not present)
+ NOTE: minor issue
NOTE: https://simplesamlphp.org/security/201801-01
NOTE: The issue lies in the simplesamlphp/saml2 part, which is
NOTE: updated in 1.15.2 to the respective fixed version.
=====================================
data/DLA/list
=====================================
--- a/data/DLA/list
+++ b/data/DLA/list
@@ -1,3 +1,6 @@
+[02 Mar 2018] DLA-1297-1 simplesamlphp - security update
+ {CVE-2016-9814 CVE-2016-9955}
+ [wheezy] - simplesamlphp 1.9.2-1+deb7u3
[28 Feb 2018] DLA-1296-1 xmltooling - security update
{CVE-2018-0489}
[wheezy] - xmltooling 1.4.2-5+deb7u3
=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -92,9 +92,6 @@ ruby1.9.1 (Emilio Pozuelo)
--
rubygems (Emilio Pozuelo)
--
-simplesamlphp
- NOTE: 20180227: details under embargo (anarcat)
---
tiff
NOTE: incomplete fix of CVE-2017-18013
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/366e3247b0f3d085442dd659e365ffbb2a0d025a...cd4f5ba9ac2d21733fd29d910b89bb70745d01b8
---
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/compare/366e3247b0f3d085442dd659e365ffbb2a0d025a...cd4f5ba9ac2d21733fd29d910b89bb70745d01b8
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
Secure-testing-commits mailing list
Secure-testing-commits@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/secure-testing-commits
