Advisories » MGASA-2017-0293

Updated php-pear-CAS package fixes security vulnerability

Publication date: 21 Aug 2017
Modification date: 21 Aug 2017
Type: security
Affected Mageia releases : 5

Description

It was discovered that php-pear-CAS contained a possible authentication
bypass in validateCAS20.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=20722
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/2THFM2BPR5YGBE42CTAPCAUVZ77UDLYF/
• https://github.com/apereo/phpCAS/issues/228

SRPMS

5/core

• php-pear-CAS-1.3.5-1.mga5