[Secure-testing-commits] [Git][security-tracker-team/security-tracker][master] Add temporary workaround and remove no-dsa tags for issues included in update

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0c10760f by Salvatore Bonaccorso at 2018-03-02T13:51:50+01:00
Add temporary workaround and remove no-dsa tags for issues included in update

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -316,6 +316,7 @@ CVE-2018-XXXX [SSPSA 201802-01: Check for supported signature algorithms when ca
 	- simplesamlphp 1.15.3-1
 	[stretch] - simplesamlphp 1.14.11-1+deb9u1
 	[jessie] - simplesamlphp 1.13.1-2+deb8u1
+	[wheezy] - simplesamlphp 1.9.2-1+deb7u3
 	NOTE: https://simplesamlphp.org/security/201802-01
 	NOTE: Fixed by: https://github.com/simplesamlphp/saml2/commit/88a9ae848c4b310b1c53b5700893d890999dd930
 CVE-2018-7537
@@ -61580,7 +61581,6 @@ CVE-2016-9940
 CVE-2016-9955 (The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before ...)
 	- simplesamlphp 1.14.11-1 (low)
 	[jessie] - simplesamlphp <no-dsa> (Minor issue)
-	[wheezy] - simplesamlphp <no-dsa> (Minor issue)
 	NOTE: https://simplesamlphp.org/security/201612-02
 	NOTE: https://github.com/simplesamlphp/simplesamlphp/commit/a2326d75dd14accaac162dd2cb30aaefcc1f9205
 	NOTE: http://www.openwall.com/lists/oss-security/2016/12/14/7
@@ -64172,7 +64172,6 @@ CVE-2016-9815 (Xen through 4.7.x allows local ARM guest OS users to cause a deni
 CVE-2016-9814 (The validateSignature method in the SAML2\Utils class in SimpleSAMLphp ...)
 	- simplesamlphp 1.14.10-1 (low)
 	[jessie] - simplesamlphp <no-dsa> (Minor issue)
-	[wheezy] - simplesamlphp <no-dsa> (Minor issue)
 	NOTE: https://simplesamlphp.org/security/201612-01
 	NOTE: https://github.com/simplesamlphp/saml2/pull/81
 	NOTE: https://github.com/simplesamlphp/saml2/commit/7008b0916426212c1cc2fc238b38ab9ebff0748c



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c10760f8940a3a488d6084316dadaa361ac85cd

---
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/0c10760f8940a3a488d6084316dadaa361ac85cd
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/secure-testing-commits/attachments/20180302/92214a74/attachment.html>