Information on source package ledgersmb

Available versions

ReleaseVersion
jessie1.3.40-1
buster1.6.9+ds-1+deb10u3
bullseye1.6.9+ds-2+deb11u3
bookworm1.6.33+ds-2.1
sid1.6.33+ds-2.2

Open issues

BugjessiebusterbullseyebookwormsidDescription
CVE-2024-23831vulnerablevulnerable (no DSA)vulnerable (no DSA)vulnerable (no DSA)vulnerableLedgerSMB is a free web-based double-entry accounting system. When a L ...
CVE-2021-3731vulnerablefixedfixedfixedfixedLedgerSMB does not sufficiently guard against being wrapped by other s ...
CVE-2021-3694vulnerablefixedfixedfixedfixedLedgerSMB does not sufficiently HTML-encode error messages sent to the ...
CVE-2021-3693vulnerablefixedfixedfixedfixedLedgerSMB does not check the origin of HTML fragments merged into the ...

Resolved issues

BugDescription
CVE-2021-3882LedgerSMB does not set the 'Secure' attribute on the session authoriza ...

Security announcements

DSA / DLADescription
DSA-4962-2ledgersmb - regression update
DSA-4962-1ledgersmb - security update

Search for package or bug name: Reporting problems