[Git][security-tracker-team/security-tracker][master] stretch triage

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
f2f0f309 by Moritz Muehlenhoff at 2018-11-16T16:16:33Z
stretch triage

- - - - -


2 changed files:

- data/CVE/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -1110,6 +1110,7 @@ CVE-2018-18957 (An issue has been found in libIEC61850 v1.3. It is a stack-based
 	NOT-FOR-US: libIEC61850
 CVE-2018-18956 (The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x ...)
 	- suricata <unfixed>
+	[stretch] - suricata <no-dsa> (Minor issue)
 	[jessie] - suricata <not-affected> (Vulnerable code not present, no MIME support in this version)
 	NOTE: https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-October/016227.html
 	NOTE: https://redmine.openinfosecfoundation.org/issues/2658#change-10374
@@ -66297,6 +66298,7 @@ CVE-2017-12873 (SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obt
 CVE-2017-12872 (The (1) Htpasswd authentication source in the authcrypt module and (2) ...)
 	{DLA-1408-1 DLA-1205-1}
 	- simplesamlphp 1.14.15-1
+	[stretch] - simplesamlphp <no-dsa> (Minor issue)
 	NOTE: https://simplesamlphp.org/security/201703-01
 	NOTE: Patches: https://github.com/simplesamlphp/simplesamlphp/commit/ab7761d4a523a4ed00479fb1ddba688e7ca72439
 	NOTE: https://github.com/simplesamlphp/simplesamlphp/commit/caf764cc2c9b68ac29741070ebdf133a595443f1
@@ -66318,6 +66320,7 @@ CVE-2017-12869 (The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows
 CVE-2017-12868 (The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in ...)
 	{DLA-1408-1 DLA-1205-1}
 	- simplesamlphp 1.14.15-1
+	[stretch] - simplesamlphp <not-affected> (Only affects setups with old PHP versions not found in stable)
 	NOTE: https://simplesamlphp.org/security/201705-01
 	NOTE: Patch: https://github.com/simplesamlphp/simplesamlphp/commit/caf764cc2c9b68ac29741070ebdf133a595443f1
 CVE-2017-12867 (The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 ...)


=====================================
data/dsa-needed.txt
=====================================
@@ -56,6 +56,8 @@ pdns
 php7.0
   wait until more severe issues have come up
 --
+simplesamlphp
+--
 smarty3
 --
 sssd



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f2f0f309ffad00946b79b2e0c8f89c88d2d2de43

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/f2f0f309ffad00946b79b2e0c8f89c88d2d2de43
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20181116/bef5214f/attachment.html>