| Release | Version |
|---|---|
| jessie | 4.6.1-1 |
| stretch | 4.7.0-4 |
| buster | 4.7.0-7 |
| bullseye | 4.7.0-8 |
| Bug | Description |
|---|---|
| TEMP-0000000-75B37A | insufficient form variable escaping |
| CVE-2013-2106 | webauth before 4.6.1 has authentication credential disclosure |
| CVE-2009-2945 | weblogin/login.fcgi (aka the WebLogin login script) in Stanford Univer ... |