Information on source package lemonldap-ng

Available versions

ReleaseVersion
jessie1.3.3-1
jessie (security)1.3.3-1+deb8u2
stretch1.9.7-3+deb9u2
stretch (security)1.9.7-3+deb9u1
buster (security)2.0.2+ds-7+deb10u2
bullseye2.0.7+ds-2
sid2.0.7+ds-2

Open issues

BugjessiestretchbusterbullseyesidDescription
CVE-2019-19791vulnerable (no DSA)vulnerable (no DSA)vulnerable (no DSA)fixedfixedApache access rules and SOAP/REST endpoints issue
CVE-2019-15941fixedvulnerable (no DSA, ignored)fixedfixedfixedOpenID Connect Issuer in LemonLDAP::NG 2.x through 2.0.5 may allow an ...

Resolved issues

BugDescription
CVE-2019-13031LemonLDAP::NG before 1.9.20 has an XML External Entity (XXE) issue whe ...
CVE-2019-12046LemonLDAP::NG -2.0.3 has Incorrect Access Control. ...
CVE-2012-6426LemonLDAP::NG before 1.2.3 does not use the signature-verification cap ...

Security announcements

DSA / DLADescription
DSA-4533-1lemonldap-ng - security update
DLA-1844-1lemonldap-ng - security update
DLA-1790-1lemonldap-ng - security update
DSA-4446-1lemonldap-ng - security update
Search for package or bug name: Reporting problems