You are here
Home > Preporuke > Sigurnosni nedostatak programske biblioteke php-robrichards-xmlseclibs

Sigurnosni nedostatak programske biblioteke php-robrichards-xmlseclibs

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2019-81f61cdceb
2019-11-15 03:20:21.101981
——————————————————————————–

Name : php-robrichards-xmlseclibs
Product : Fedora 29
Version : 2.1.1
Release : 1.fc29
URL : https://github.com/robrichards/xmlseclibs
Summary : A PHP library for XML Security
Description :
xmlseclibs is a library written in PHP for working with XML Encryption and
Signatures.

NOTE: php-mcrypt will not be automatically installed as a dependency of this
package so it will need to be “manually” installed if it is required —
specifically for the following XMLSecurityKey encryption types:
– XMLSecurityKey::AES128_CBC
– XMLSecurityKey::AES192_CBC
– XMLSecurityKey::AES256_CBC
– XMLSecurityKey::TRIPLEDES_CBC

Autoloader: /usr/share/php/RobRichards/XMLSecLibs/autoload.php

——————————————————————————–
Update Information:

## 2.1.1 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01 ## 2.1.0
Backports changes from 3.0 branch
——————————————————————————–
ChangeLog:

* Wed Nov 6 2019 Shawn Iwinski <shawn@iwin.ski> – 2.1.1-1
– Update to 2.1.1 (CVE-2019-3465)
– https://simplesamlphp.org/security/201911-01
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> – 2.0.1-9
– Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng@fedoraproject.org> – 2.0.1-8
– Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-81f61cdceb’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2019-be01267416
2019-11-15 03:20:21.101966
——————————————————————————–

Name : php-robrichards-xmlseclibs3
Product : Fedora 29
Version : 3.0.4
Release : 1.fc29
URL : https://github.com/robrichards/xmlseclibs
Summary : A PHP library for XML Security (version 3)
Description :
xmlseclibs is a library written in PHP for working with XML Encryption and
Signatures.

Autoloader: /usr/share/php/RobRichards/XMLSecLibs3/autoload.php

——————————————————————————–
Update Information:

## 3.0.4 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01
——————————————————————————–
ChangeLog:

* Wed Nov 6 2019 Shawn Iwinski <shawn@iwin.ski> – 3.0.4-1
– Update to 3.0.4 (RHBZ #1769353 / CVE-2019-3465)
– https://simplesamlphp.org/security/201911-01
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> – 3.0.3-3
– Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
* Sat Feb 2 2019 Fedora Release Engineering <releng@fedoraproject.org> – 3.0.3-2
– Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
* Mon Nov 26 2018 Remi Collet <remi@remirepo.net> – 3.0.3-1
– update to 3.0.3
——————————————————————————–
References:

[ 1 ] Bug #1769353 – php-robrichards-xmlseclibs3-3.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1769353
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-be01267416’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2019-9a960c8a98
2019-11-15 03:00:50.375473
——————————————————————————–

Name : php-robrichards-xmlseclibs3
Product : Fedora 31
Version : 3.0.4
Release : 1.fc31
URL : https://github.com/robrichards/xmlseclibs
Summary : A PHP library for XML Security (version 3)
Description :
xmlseclibs is a library written in PHP for working with XML Encryption and
Signatures.

Autoloader: /usr/share/php/RobRichards/XMLSecLibs3/autoload.php

——————————————————————————–
Update Information:

## 3.0.4 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01
——————————————————————————–
ChangeLog:

* Wed Nov 6 2019 Shawn Iwinski <shawn@iwin.ski> – 3.0.4-1
– Update to 3.0.4 (RHBZ #1769353 / CVE-2019-3465)
– https://simplesamlphp.org/security/201911-01
——————————————————————————–
References:

[ 1 ] Bug #1769353 – php-robrichards-xmlseclibs3-3.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1769353
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-9a960c8a98’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2019-73d0fe1d15
2019-11-15 03:00:50.375490
——————————————————————————–

Name : php-robrichards-xmlseclibs
Product : Fedora 31
Version : 2.1.1
Release : 1.fc31
URL : https://github.com/robrichards/xmlseclibs
Summary : A PHP library for XML Security
Description :
xmlseclibs is a library written in PHP for working with XML Encryption and
Signatures.

NOTE: php-mcrypt will not be automatically installed as a dependency of this
package so it will need to be “manually” installed if it is required —
specifically for the following XMLSecurityKey encryption types:
– XMLSecurityKey::AES128_CBC
– XMLSecurityKey::AES192_CBC
– XMLSecurityKey::AES256_CBC
– XMLSecurityKey::TRIPLEDES_CBC

Autoloader: /usr/share/php/RobRichards/XMLSecLibs/autoload.php

——————————————————————————–
Update Information:

## 2.1.1 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01 ## 2.1.0
Backports changes from 3.0 branch
——————————————————————————–
ChangeLog:

* Wed Nov 6 2019 Shawn Iwinski <shawn@iwin.ski> – 2.1.1-1
– Update to 2.1.1 (CVE-2019-3465)
– https://simplesamlphp.org/security/201911-01
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-73d0fe1d15’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2019-dc90bf093b
2019-11-15 03:54:31.619943
——————————————————————————–

Name : php-robrichards-xmlseclibs
Product : Fedora 30
Version : 2.1.1
Release : 1.fc30
URL : https://github.com/robrichards/xmlseclibs
Summary : A PHP library for XML Security
Description :
xmlseclibs is a library written in PHP for working with XML Encryption and
Signatures.

NOTE: php-mcrypt will not be automatically installed as a dependency of this
package so it will need to be “manually” installed if it is required —
specifically for the following XMLSecurityKey encryption types:
– XMLSecurityKey::AES128_CBC
– XMLSecurityKey::AES192_CBC
– XMLSecurityKey::AES256_CBC
– XMLSecurityKey::TRIPLEDES_CBC

Autoloader: /usr/share/php/RobRichards/XMLSecLibs/autoload.php

——————————————————————————–
Update Information:

## 2.1.1 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01 ## 2.1.0
Backports changes from 3.0 branch
——————————————————————————–
ChangeLog:

* Wed Nov 6 2019 Shawn Iwinski <shawn@iwin.ski> – 2.1.1-1
– Update to 2.1.1 (CVE-2019-3465)
– https://simplesamlphp.org/security/201911-01
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> – 2.0.1-9
– Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-dc90bf093b’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

——————————————————————————–
Fedora Update Notification
FEDORA-2019-ec8719a21c
2019-11-15 03:54:31.619928
——————————————————————————–

Name : php-robrichards-xmlseclibs3
Product : Fedora 30
Version : 3.0.4
Release : 1.fc30
URL : https://github.com/robrichards/xmlseclibs
Summary : A PHP library for XML Security (version 3)
Description :
xmlseclibs is a library written in PHP for working with XML Encryption and
Signatures.

Autoloader: /usr/share/php/RobRichards/XMLSecLibs3/autoload.php

——————————————————————————–
Update Information:

## 3.0.4 CVE-2019-3465 / https://simplesamlphp.org/security/201911-01
——————————————————————————–
ChangeLog:

* Wed Nov 6 2019 Shawn Iwinski <shawn@iwin.ski> – 3.0.4-1
– Update to 3.0.4 (RHBZ #1769353 / CVE-2019-3465)
– https://simplesamlphp.org/security/201911-01
* Fri Jul 26 2019 Fedora Release Engineering <releng@fedoraproject.org> – 3.0.3-3
– Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
——————————————————————————–
References:

[ 1 ] Bug #1769353 – php-robrichards-xmlseclibs3-3.0.4 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1769353
——————————————————————————–

This update can be installed with the “dnf” update program. Use
su -c ‘dnf upgrade –advisory FEDORA-2019-ec8719a21c’ at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list — package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org

AutorToni Vugdelija
Cert idNCERT-REF-2019-11-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa postgresql-common

Otkriven je sigurnosni nedostatak u programskom paketu postgresql-common za operacijski sustav Debian. Otkriveni nedostatak potencijalnim napadačima omogućuje stjecanje uvećanih ovlasti....

Close