[Git][security-tracker-team/security-tracker][master] mark two older simplesamlphp issues as no-dsa

[Thijs Kinkhorst]

Thijs Kinkhorst pushed to branch master at Debian Security Tracker / security-tracker


Commits:
00becffd by Thijs Kinkhorst at 2019-11-05T08:12:57Z
mark two older simplesamlphp issues as no-dsa

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -124337,11 +124337,13 @@ CVE-2017-12872 (The (1) Htpasswd authentication source in the authcrypt module a
 	NOTE: https://github.com/simplesamlphp/simplesamlphp/commit/caf764cc2c9b68ac29741070ebdf133a595443f1
 CVE-2017-12871 (The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAML ...)
 	- simplesamlphp 1.14.15-1
+	[stretch] - simplesamlphp <no-dsa> (Minor issue mitigated by HTTPS usage, hard to backport)
 	[jessie] - simplesamlphp <not-affected> (Vulnerable code not present)
 	[wheezy] - simplesamlphp <not-affected> (Vulnerable code not present)
 	NOTE: https://simplesamlphp.org/security/201703-02
 CVE-2017-12870 (SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle ...)
 	- simplesamlphp 1.14.15-1
+	[stretch] - simplesamlphp <no-dsa> (Minor issue mitigated by HTTPS usage, hard to backport)
 	[jessie] - simplesamlphp <ignored> (Minor issue mitigated by HTTPS usage, hard to backport)
 	[wheezy] - simplesamlphp <ignored> (Minor issue mitigated by HTTPS usage, hard to backport)
 	NOTE: https://simplesamlphp.org/security/201704-01



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/00becffde3c7e958e9d644600c333f96262c4663

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/00becffde3c7e958e9d644600c333f96262c4663
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191105/10014d38/attachment.html>