tocsin

Debian/lemonldap-ng: high 8

In LemonLDAP::NG before 2.16.7 and 2.17 through 2.21 before 2.21.3, OS command injection can occur in the Safe jail. It does not Localize _ during rule evaluation. Thus, an administrator who can edit

Action: Upgrade lemonldap-ng to 2.21.3+ds-1 or later.

Affected

introducedfixedlast affected
02.21.3+ds-1-

Fixed versions

2.21.3+ds-1

Sources

published · modified · JSON