On Wed, 2010-10-13 at 23:24 +0200, Ansgar Burchardt wrote:
> libapache-authenhook-perl logs passwords in Apache's error.log if the
> log level is >= info[1].  I prepared an update for Lenny including the
> same patch used for testing/unstable (already unblocked[2] as well).
> 
> The security team sees this as a minor issue that should not get a DSA
> and be fixed in the next point release.
> 
> Shall I go ahead and upload the package to proposed-updates?

Please go ahead.

Regards,

Adam




-- 
To UNSUBSCRIBE, email to debian-release-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/1287762952.16686.5973.ca...@hathi.jungle.funky-badger.org

Reply via email to