tocsin

Debian/symfony: critical 9.8

An issue was discovered in the Ldap component in Symfony 2.8.x before 2.8.37, 3.3.x before 3.3.17, 3.4.x before 3.4.7, and 4.0.x before 4.0.7. It allows remote attackers to bypass authentication by lo

Action: Upgrade symfony to 3.4.12+dfsg-1 or later.

Affected

introducedfixedlast affected
03.4.12+dfsg-1-

Fixed versions

3.4.12+dfsg-1

Sources

published · modified · JSON