Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
0b98aecd by Salvatore Bonaccorso at 2021-07-23T06:40:19+02:00
Updat information for CVE-2021-35472/lemonldap-ng
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4293,6 +4293,7 @@ CVE-2021-35473 [Access token lifetime is not verified
with OAuth2 Handler]
CVE-2021-35472 [Session cache corruption can lead to authorization bypass or
spoofing]
RESERVED
- lemonldap-ng 2.0.11+ds-4
+ [stretch] - lemonldap-ng <not-affected> (Vulnerable code not present;
updateSession doesn't use in-memory cache)
NOTE: https://gitlab.ow2.org/lemonldap-ng/lemonldap-ng/-/issues/2539
CVE-2021-35471
RESERVED
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0b98aecd1e429a501ebdea33b981f1916680f13f
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0b98aecd1e429a501ebdea33b981f1916680f13f
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
