Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list] 
Date: Thu, 3 Feb 2022 10:07:26 -0800
From: Abhishek Tiwari <abti@...che.org>
To: oss-security@...ts.openwall.com
Cc: user@...blin.apache.org
Subject: CVE-2021-36152: Apache Gobblin: Insecure TrustManager used in LDAP connections

Severity: low

Description:

Apache Gobblin trusts all certificates used for LDAP connections in
Gobblin-as-a-Service. This affects versions <= 0.15.0. Users should
update to version 0.16.0 which addresses this issue.

Credit:

Apache Gobblin would like to thank Simon Gerst for reporting this issue.

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.