[Git][security-tracker-team/security-tracker][master] fix simplesamlphp

[Thijs Kinkhorst]

Thijs Kinkhorst pushed to branch master at Debian Security Tracker / security-tracker


Commits:
92be510f by Thijs Kinkhorst at 2019-11-06T12:20:33Z
fix simplesamlphp

- - - - -


4 changed files:

- data/CVE/list
- data/DLA/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -46022,7 +46022,7 @@ CVE-2019-3466
 	RESERVED
 CVE-2019-3465
 	RESERVED
-	- simplesamlphp <unfixed> (bug #944107)
+	- simplesamlphp 1.17.6-2 (bug #944107)
 	NOTE: https://groups.google.com/forum/#!msg/simplesamlphp-announce/2odMqz63z7k/6zQQeM91EwAJ
 CVE-2019-3464 (Insufficient sanitization of environment variables passed to rsync can ...)
 	{DSA-4382-1 DLA-1660-1}


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[06 Nov 2019] DLA-1983-1 simplesamlphp - security update
+	{CVE-2019-3465}
+	[jessie] - simplesamlphp 1.13.1-2+deb8u3
 [05 Nov 2019] DLA-1982-1 openafs - security update
 	{CVE-2019-18601 CVE-2019-18602 CVE-2019-18603}
 	[jessie] - openafs 1.6.9-2+deb8u9


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,7 @@
+[06 Nov 2019] DSA-4560-1 simplesamlphp - security update
+	{CVE-2019-3465}
+	[stretch] - simplesamlphp 1.14.11-1+deb9u2
+	[buster] - simplesamlphp 1.16.3-1+deb10u1
 [05 Nov 2019] DSA-4559-1 proftpd-dfsg - security update
 	{CVE-2019-18217}
 	[stretch] - proftpd-dfsg 1.3.5b-4+deb9u2


=====================================
data/dsa-needed.txt
=====================================
@@ -53,8 +53,6 @@ python-ecdsa (seb)
 --
 python-reportlab (hle)
 --
-simplesamlphp/oldstable
---
 slurm-llnl (jmm)
 --
 smarty3/oldstable



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/92be510f4392e91055ae2d9b30bfb02ef655ab72

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/commit/92be510f4392e91055ae2d9b30bfb02ef655ab72
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20191106/62a408eb/attachment.html>