tocsin

Debian/simplesamlphp: medium 5.9

The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow remote attackers to conduct timing side-channel attacks by le

Action: Upgrade simplesamlphp to 1.14.15-1 or later.

Affected

introducedfixedlast affected
01.14.15-1-

Fixed versions

1.14.15-1

Sources

published · modified · JSON