[Git][security-tracker-team/security-tracker][master] Update information for lemonldap-ng issue

[Salvatore Bonaccorso]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d43001fe by Salvatore Bonaccorso at 2019-06-26T15:18:00Z
Update information for lemonldap-ng issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,7 +1,9 @@
 CVE-2019-XXXX [XXE vulnerability in SOAP notification server]
-	- lemonldap-ng <unfixed> (bug #931117)
+	- lemonldap-ng 2.0.0+ds-1 (bug #931117)
 	[stretch] - lemonldap-ng <no-dsa> (Minor issue, can be fixed via point release, notification server not enabled by default)
 	NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/issues/1818
+	NOTE: 2.0.0 upstream replaced the (old) feature with a new REST/JSON service, and
+	NOTE: added a "oldXMLFormat" option which is functionwise broken up to 2.0.5.
 CVE-2019-12965
 	RESERVED
 CVE-2019-12964 (LiveZilla Server before 8.0.1.1 is vulnerable to XSS in the ticket.php ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d43001fefb10bf20dd338614b5ba913156551621

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/d43001fefb10bf20dd338614b5ba913156551621
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20190626/90e88578/attachment.html>