Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-16093 →
DEBIAN-CVE-2020-16093
In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In LemonLDAP::NG (aka lemonldap-ng) through 2.0.8, validity of the X.509 certificate is not checked by default when connecting to remote LDAP backends, because the default configuration of the Net::LDAPS module for Perl is used.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
lemonldap-ng
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.9+ds-1"}]}]
Debian:13
lemonldap-ng
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.9+ds-1"}]}]
Debian:14
lemonldap-ng
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.9+ds-1"}]}]
Références
- advisory security-tracker.debian.org