Login
Newsletter
Werbung

Sicherheit: Mangelnde Prüfung von Signaturen in php-robrichards-xmlseclibs
Aktuelle Meldungen Distributionen
Name: Mangelnde Prüfung von Signaturen in php-robrichards-xmlseclibs
ID: FEDORA-2019-81f61cdceb
Distribution: Fedora
Plattformen: Fedora 29
Datum: Fr, 15. November 2019, 07:41
Referenzen: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3465
Applikationen: php-robrichards-xmlseclibs

Originalnachricht

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2019-81f61cdceb
2019-11-15 03:20:21.101981
-------------------------------------------------------------------------------
-

Name : php-robrichards-xmlseclibs
Product : Fedora 29
Version : 2.1.1
Release : 1.fc29
URL : https://github.com/robrichards/xmlseclibs
Summary : A PHP library for XML Security
Description :
xmlseclibs is a library written in PHP for working with XML Encryption and
Signatures.

NOTE: php-mcrypt will not be automatically installed as a dependency of this
package so it will need to be "manually" installed if it is required --
specifically for the following XMLSecurityKey encryption types:
- XMLSecurityKey::AES128_CBC
- XMLSecurityKey::AES192_CBC
- XMLSecurityKey::AES256_CBC
- XMLSecurityKey::TRIPLEDES_CBC

Autoloader: /usr/share/php/RobRichards/XMLSecLibs/autoload.php

-------------------------------------------------------------------------------
-
Update Information:

## 2.1.1 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01 ## 2.1.0
Backports changes from 3.0 branch
-------------------------------------------------------------------------------
-
ChangeLog:

* Wed Nov 6 2019 Shawn Iwinski <shawn@iwin.ski> - 2.1.1-1
- Update to 2.1.1 (CVE-2019-3465)
- https://simplesamlphp.org/security/201911-01
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> -
2.0.1-9
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng@fedoraproject.org> -
2.0.1-8
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2019-81f61cdceb' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung