[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] 2 commits: take simplesamlphp

[Thijs Kinkhorst]

Thijs Kinkhorst pushed to branch master at Debian Security Tracker / security-tracker


Commits:
83fa7cd1 by Thijs Kinkhorst at 2018-03-02T11:03:30+00:00
take simplesamlphp

- - - - -
cd4f5ba9 by Thijs Kinkhorst at 2018-03-02T11:04:35+00:00
Reserve DLA-1297-1 for simplesamlphp

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -3311,7 +3311,8 @@ CVE-2018-6520 (SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an 
 CVE-2018-6519 (The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 ...)
 	{DSA-4127-1}
 	- simplesamlphp 1.15.2-1
-	[wheezy] - simplesamlphp <ignored> (Minor issue)
+	[wheezy] - simplesamlphp <not-affected> (Vulnerable code not present)
+        NOTE: minor issue
 	NOTE: https://simplesamlphp.org/security/201801-01
 	NOTE: The issue lies in the simplesamlphp/saml2 part, which is
 	NOTE: updated in 1.15.2 to the respective fixed version.


=====================================
data/DLA/list
=====================================
--- a/data/DLA/list
+++ b/data/DLA/list
@@ -1,3 +1,6 @@
+[02 Mar 2018] DLA-1297-1 simplesamlphp - security update
+	{CVE-2016-9814 CVE-2016-9955}
+	[wheezy] - simplesamlphp 1.9.2-1+deb7u3
 [28 Feb 2018] DLA-1296-1 xmltooling - security update
 	{CVE-2018-0489}
 	[wheezy] - xmltooling 1.4.2-5+deb7u3


=====================================
data/dla-needed.txt
=====================================
--- a/data/dla-needed.txt
+++ b/data/dla-needed.txt
@@ -92,9 +92,6 @@ ruby1.9.1 (Emilio Pozuelo)
 --
 rubygems (Emilio Pozuelo)
 --
-simplesamlphp
-  NOTE: 20180227: details under embargo (anarcat)
---
 tiff
   NOTE: incomplete fix of CVE-2017-18013
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/366e3247b0f3d085442dd659e365ffbb2a0d025a...cd4f5ba9ac2d21733fd29d910b89bb70745d01b8

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/compare/366e3247b0f3d085442dd659e365ffbb2a0d025a...cd4f5ba9ac2d21733fd29d910b89bb70745d01b8
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180302/9e4dd73d/attachment-0001.html>