Source: ledgersmb Severity: normal Tags: security

Please consider updating ledgersmb. Filing as RC critical due to secrutiy issues in the old version.

Upstream says: "The current stable release line is 1.10. For more information about older versions, see the FAQ item about supported releases. Versions 1.6 and older should no longer be used due to known security issues that cannot be resolved in that code base." [1]

Upstream had declared 1.6 end of life 2021-06-10 [2]

[1] https://ledgersmb.org/content/download [2] https://ledgersmb.org/faq/which-versions-do-you-support