Thijs Kinkhorst pushed to branch master at Debian Security Tracker / security-tracker
Commits: 00becffd by Thijs Kinkhorst at 2019-11-05T08:12:57Z mark two older simplesamlphp issues as no-dsa - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -124337,11 +124337,13 @@ CVE-2017-12872 (The (1) Htpasswd authentication source in the authcrypt module a NOTE: https://github.com/simplesamlphp/simplesamlphp/commit/caf764cc2c9b68ac29741070ebdf133a595443f1 CVE-2017-12871 (The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAML ...) - simplesamlphp 1.14.15-1 + [stretch] - simplesamlphp <no-dsa> (Minor issue mitigated by HTTPS usage, hard to backport) [jessie] - simplesamlphp <not-affected> (Vulnerable code not present) [wheezy] - simplesamlphp <not-affected> (Vulnerable code not present) NOTE: https://simplesamlphp.org/security/201703-02 CVE-2017-12870 (SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle ...) - simplesamlphp 1.14.15-1 + [stretch] - simplesamlphp <no-dsa> (Minor issue mitigated by HTTPS usage, hard to backport) [jessie] - simplesamlphp <ignored> (Minor issue mitigated by HTTPS usage, hard to backport) [wheezy] - simplesamlphp <ignored> (Minor issue mitigated by HTTPS usage, hard to backport) NOTE: https://simplesamlphp.org/security/201704-01 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/00becffde3c7e958e9d644600c333f96262c4663 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/00becffde3c7e958e9d644600c333f96262c4663 You're receiving this email because of your account on salsa.debian.org.
_______________________________________________ debian-security-tracker-commits mailing list debian-security-tracker-commits@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits