CVE-2019-3465
1 advisory.
Packagist/robrichards/xmlseclibs CVE-2019-3465: high 8.8
Signature validation bypass in XmlSecLibs
Action: Upgrade robrichards/xmlseclibs to 2.1.1 or later.
composer require robrichards/xmlseclibs:3.0.4composer require robrichards/xmlseclibs:2.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.4 | - |
| 1.0.0 | 2.1.1 | - |
Fixed versions
| 3.0.4 | 2.1.1 |
Sources
- osv: GHSA-pqm6-cgwr-x6pf
- https://nvd.nist.gov/vuln/detail/CVE-2019-3465
- https://github.com/robrichards/xmlseclibs/commit/0a53d3c3aa87564910cae4ed01416441d3ae0db5
- https://www.tenable.com/security/tns-2019-09
- https://www.debian.org/security/2019/dsa-4560
- https://simplesamlphp.org/security/201911-01
- https://seclists.org/bugtraq/2019/Nov/8
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBSSRV5Q7JFCYO46A3EN624UZ4KXFQ2M
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OCSR3V6LNWJAD37VQB6M2K7P4RQSCVFG
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAWOVYLZKYDCQBLQEJCFAAD3KQTBPHXE
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HBE2SJSXG7J4XYLJ2H6HC2VPPOG2OMUN
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ESKJTWLE7QZBQ3EKMYXKMBQG3JDEJWM6
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BNFMY5RRLU63P25HEBVDO5KAVI7TX7JV
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BBKVDUZ7G5ZOUO4BFJWLNJ6VOKBQJX5U
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AB34ILMJ67CUROBOR6YPKB46VHXLOAJ4
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7KID7C4AZPYYIZQIPSLANP4R2RQR6YK3
- https://lists.debian.org/debian-lts-announce/2019/11/msg00003.html
- https://github.com/FriendsOfPHP/security-advisories/blob/master/robrichards/xmlseclibs/CVE-2019-3465.yaml
CVE-2019-3465 · published · modified · JSON