Errata ID | 125 |
---|---|
Date | 2019-05-29 |
Source package | univention-lib |
Fixed in version | 8.0.1-20A~4.4.0.201905281421 |
Description | This update addresses the following issues: * The package now uses dh_python2 instead of python-support. Therefore python modules are installed into /usr/lib/python2.7/dist-packages/univention/lib/. * A path traversal vulnerability in the ldap_extension.py listener utilities has been fixed. * Log stderr if LDAP schema validation fails. * A symlink and code execution vulnerabiliy has been fixed in univention.lib.listenerSharePath. * Python3 compatibility for univention.lib.admember has been enhanced. |
Additional notes | |
UCS Bug number | #49136 #41780 #49500 #44054 #49176 |