[Git][security-tracker-team/security-tracker][master] Reserve DLA-3496-1 for lemonldap-ng

[Guilhem Moulin (@guilhem)]

Guilhem Moulin pushed to branch master at Debian Security Tracker / security-tracker


Commits:
4be5b41f by Guilhem Moulin at 2023-07-14T12:24:54+02:00
Reserve DLA-3496-1 for lemonldap-ng

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -15002,7 +15002,6 @@ CVE-2023-28863 (AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verificati
 CVE-2023-28862 (An issue was discovered in LemonLDAP::NG before 2.16.1. Weak session I ...)
 	- lemonldap-ng 2.16.1+ds-1
 	[bullseye] - lemonldap-ng 2.0.11+ds-4+deb11u4
-	[buster] - lemonldap-ng <no-dsa> (Minor issue)
 	NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2896
 	NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/merge_requests/334
 CVE-2023-28861


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[14 Jul 2023] DLA-3496-1 lemonldap-ng - security update
+	{CVE-2023-28862}
+	[buster] - lemonldap-ng 2.0.2+ds-7+deb10u9
 [13 Jul 2023] DLA-3495-1 php-dompdf - security update
 	{CVE-2021-3838 CVE-2022-2400}
 	[buster] - php-dompdf 0.6.2+dfsg-3+deb10u1


=====================================
data/dla-needed.txt
=====================================
@@ -81,10 +81,6 @@ imagemagick
 --
 iperf3 (Markus Koschany)
 --
-lemonldap-ng (guilhem)
-  NOTE: 20230620: Added by Front-Desk (Beuc)
-  NOTE: 20230620: Follow 2 fixes from bullseye 11.7 (CVE-2023-28862 + unreferenced URL validation bypass) (Beuc/front-desk)
---
 libapache2-mod-auth-openidc (gladk)
   NOTE: 20230620: Added by Front-Desk (Beuc)
   NOTE: 20230620: Follow fix from bullseye 11.7 (CVE-2022-23527) + 1 postponed CVE-2021-39191 (Beuc/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4be5b41f94628e26321ab6483114107cad848fb2

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/4be5b41f94628e26321ab6483114107cad848fb2
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230714/8d3f48d4/attachment.htm>