Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
5c710e03 by Salvatore Bonaccorso at 2021-07-22T22:52:21+02:00
Track fixes for lemonldap-ng issues via unstable
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4286,13 +4286,13 @@ CVE-2021-35474 (Stack-based Buffer Overflow
vulnerability in cachekey plugin of
NOTE:
https://github.com/apache/trafficserver/commit/b82a3d192f995fb9d78e1c44d51d9acca4783277
(8.1.x)
CVE-2021-35473 [Access token lifetime is not verified with OAuth2 Handler]
RESERVED
- - lemonldap-ng <unfixed>
+ - lemonldap-ng 2.0.11+ds-4
[buster] - lemonldap-ng <not-affected> (OAuth2 Handler introduced later)
[stretch] - lemonldap-ng <not-affected> (OAuth2 Handler introduced
later)
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2549
CVE-2021-35472 [Session cache corruption can lead to authorization bypass or
spoofing]
RESERVED
- - lemonldap-ng <unfixed>
+ - lemonldap-ng 2.0.11+ds-4
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2539
CVE-2021-35471
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c710e03cea30ab88c56e9abe73428a4dd8d119d
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/5c710e03cea30ab88c56e9abe73428a4dd8d119d
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
