drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Preisgabe von Informationen in lemonldap-ng
Name: |
Preisgabe von Informationen in lemonldap-ng |
|
ID: |
DSA-4533-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian buster |
|
Datum: |
Mi, 25. September 2019, 22:59 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15941 |
|
Applikationen: |
LemonLDAP::NG |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
- ------------------------------------------------------------------------- Debian Security Advisory DSA-4533-1 security@debian.org https://www.debian.org/security/ Moritz Muehlenhoff September 25, 2019 https://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : lemonldap-ng CVE ID : CVE-2019-15941
It was discovered that the Lemonldap::NG web SSO system did not restrict OIDC authorization codes to the relying party.
For the stable distribution (buster), this problem has been fixed in version 2.0.2+ds-7+deb10u2.
We recommend that you upgrade your lemonldap-ng packages.
For the detailed security status of lemonldap-ng please refer to its security tracker page at: https://security-tracker.debian.org/tracker/lemonldap-ng
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAl2LznoACgkQEMKTtsN8 TjZbZBAAjnrLZLJXZvpNs9flwoQDwomvJR0zwIwQ+I+x6/VUJNXCxK30dq7TIFO/ Hv77CyGwBkAsQ4KAkVEf4av9iLIumXw60KBAcrrzrbrIF5F9BPQX438otllp3DeM XxDxiDYi7VCw5KuDvH0zMc8OyxaC9CvAmiyzu6D5e2s8RSnNqg5fF0s8MR2x653H ajdF96yZAmv1ji4YWj9nrUrR9HtIH5au23F6pM1aOVStK8znokgkc4uR0v+tpFIJ YUTBrdCzZUKrNsDoZjhjcHp1pTphpVNb4am4HzjZPE7cpCYPaOZeivQuXaeOO6dV uZlXcY9uMGgm0SatYqKAdNogTaJIm46hcAc/r9ijt2jZvSBXcfSTndqWQiPHryA+ d2BOnKgFtSGpkae2f364laU/p7BGaZtEsn+PGRh5vkFKfFEBLGvnHF6w3RSnfO+k 7QNok+RNs6+HOakShINYTPVZl8B6r4w1DBUmk6I9f+KvtVVfaxN/v2s3W+K426pH No9+2BeNTK6bR1lw8I2C5vbu0xG6gqIUknAX9CR0pF7calgFbx6RRCe/DKTWbwGb 5b/huwY4ujN2UmnOqUkY6f3u75AGomZawivK4ATlY3NOb+GNK8+aXjtg/pX+zfU1 BWZY0UoOC1jUUngC6WXLfOINsGDzrpveYBktsLiLrxFLPByZ3EI= =PxoP -----END PGP SIGNATURE-----
|
|
|
|