[rt-users] LDAP Overlay Security Patch

Malcolm Herbert rt-users at mjch.net
Wed Jun 21 03:05:06 EDT 2006


On Tue, Jun 20, 2006 at 11:59:34PM -0700, Jim Meyer wrote:
|Hello!
|
|Thanks to Walter Duncan, a critical security bug in the LDAP overlay's
|account autocreation callback has been fixed. If you're using this
|code, please update it from the wiki:
|
|   http://wiki.bestpractical.com/index.cgi?LdapAutocreateAuthCallback
|
|The bug, left unpatched, could allow user accounts to be compromised.
|Please update as soon as possible.

Can you tell us which versions of RT this will affect?  thanks

-- 
Malcolm Herbert                                This brain intentionally
mjch at mjch.net                                                left blank



More information about the rt-users mailing list