Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
c5c6904d by Salvatore Bonaccorso at 2020-01-25T09:35:04+01:00
Add CVE-2020-522{5,6}/simplesamlphp
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -5869,9 +5869,16 @@ CVE-2020-5228
CVE-2020-5227
RESERVED
CVE-2020-5226 (Cross-site scripting in SimpleSAMLphp before version 1.18.4.
The www/e ...)
- TODO: check
+ - simplesamlphp 1.18.4-1
+ [buster] - simplesamlphp <not-affected> (Vulnerable code introduced
later)
+ [stretch] - simplesamlphp <not-affected> (Vulnerable code introduced
later)
+ [jessie] - simplesamlphp <not-affected> (Vulnerable code introduced
later)
+ NOTE:
https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-mj9p-v2r8-wf8w
+ NOTE: https://simplesamlphp.org/security/202001-01
CVE-2020-5225 (Log injection in SimpleSAMLphp before version 1.18.4. The
www/errorepo ...)
- TODO: check
+ - simplesamlphp 1.18.4-1
+ NOTE:
https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-6gc6-m364-85ww
+ NOTE: https://simplesamlphp.org/security/202001-02
CVE-2020-5224 (In Django User Sessions (django-user-sessions) before 1.7.1,
the views ...)
TODO: check
CVE-2020-5223 (In PrivateBin versions 1.2.0 before 1.2.2, and 1.3.0 before
1.3.2, a p ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c5c6904d87a3da8ac1c4b74ecdab3a25794fc38d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c5c6904d87a3da8ac1c4b74ecdab3a25794fc38d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
