Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
ce7d484d by Salvatore Bonaccorso at 2021-07-22T22:51:09+02:00
Update information on CVE-2021-35473/lemonldap-ng
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4287,6 +4287,8 @@ CVE-2021-35474 (Stack-based Buffer Overflow vulnerability
in cachekey plugin of
CVE-2021-35473 [Access token lifetime is not verified with OAuth2 Handler]
RESERVED
- lemonldap-ng <unfixed>
+ [buster] - lemonldap-ng <not-affected> (OAuth2 Handler introduced later)
+ [stretch] - lemonldap-ng <not-affected> (OAuth2 Handler introduced
later)
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2549
CVE-2021-35472 [Session cache corruption can lead to authorization bypass or
spoofing]
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce7d484d4eb6a8a76e4acf819520b897f59945d9
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ce7d484d4eb6a8a76e4acf819520b897f59945d9
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
