[Git][security-tracker-team/security-tracker][master] Add CVE-2021-28091/lasso

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b5caca76 by Salvatore Bonaccorso at 2021-06-01T17:55:43+02:00
Add CVE-2021-28091/lasso

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -13543,8 +13543,11 @@ CVE-2021-28092 (The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regula
 CVE-2021-3424
 	RESERVED
 	NOT-FOR-US: Keycloak
-CVE-2021-28091
+CVE-2021-28091 [XML signature wrapping vulnerability when parsing SAML responses]
 	RESERVED
+	- lasso 2.6.1-3
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1940089
+	NOTE: https://git.entrouvert.org/lasso.git/commit/?id=ea7e5efe9741e1b1787a58af16cb15b40c23be5a
 CVE-2021-28090 (Tor before 0.4.5.7 allows a remote attacker to cause Tor directory aut ...)
 	{DSA-4871-1}
 	- tor 0.4.5.7-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5caca7628b0decd0b959ac841d7f2197e6294e5

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5caca7628b0decd0b959ac841d7f2197e6294e5
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20210601/ae997135/attachment.htm>