[Git][security-tracker-team/security-tracker][master] Mark CVE-2022-39369/php-cas as no-dsa
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Sun Jul 14 15:18:57 BST 2024
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
78cbe696 by Salvatore Bonaccorso at 2024-07-14T16:17:29+02:00
Mark CVE-2022-39369/php-cas as no-dsa
- - - - -
2 changed files:
- data/CVE/list
- data/dsa-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -148559,6 +148559,7 @@ CVE-2022-39370 (GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is
CVE-2022-39369 (phpCAS is an authentication library that allows PHP applications to ea ...)
{DLA-3485-1}
- php-cas 1.6.0-1 (bug #1023571)
+ [bullseye] - php-cas <no-dsa> (Will be fixed via a point release)
NOTE: https://github.com/apereo/phpCAS/security/advisories/GHSA-8q72-6qq8-xv64
NOTE: Fixed by: https://github.com/apereo/phpCAS/commit/b759361d904a2cb2a3bcee9411fc348cfde5d163 (1.6.0)
CVE-2022-39368 (Eclipse Californium is a Java implementation of RFC7252 - Constrained ...)
=====================================
data/dsa-needed.txt
=====================================
@@ -51,10 +51,6 @@ nova
opennds/stable
pinged maintainer, but no reply yet. should most probably be bumped to 10.x
--
-php-cas/oldstable
- Bastien Roucaries proposed to work on this update
- Evaluation if at this point in bullseye now rather to be scheduled via point-relese
---
php-horde-mime-viewer/oldstable
--
php-horde-turba/oldstable
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78cbe696cf1b52ec743dcc7b09f54bfd85ca0869
--
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/78cbe696cf1b52ec743dcc7b09f54bfd85ca0869
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240714/e4119d89/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list