[Petter Reinholdtsen]
> These are the changelog entries since the version currently in
> testing:
Since my first request for a freeze exception, a serious security
issue was discovered and fixed. I just uploaded the fix. This is the
changelog:
sssd (1.2.1-4) unstable; urgency=low
* Add patch from Stephen Gallagher to ensure LDAP authentication
never accept a zero length password (Closes: #594413). Solves
CVE-2010-2940.
-- Petter Reinholdtsen <p...@debian.org> Wed, 25 Aug 2010 22:33:40 +0200
JFYI.
Happy hacking,
--
Petter Reinholdtsen
--
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/2fl1v9mz6ze....@login2.uio.no
