Hi,

Two security issues have been reported in phpCAS, which is embedded in
glpi:

http://seclists.org/oss-sec/2012/q1/551

I'm following this information so you can check if the embedded copy
needs an update, since you are also distributing it in the standard
tarball.

Note that in the Debian package I intend to remove it from the package,
since code copies are not something good, both for maintenance and
security. The best solution would be to create a separate package for
phpcas and maintain it, if someone volunteers that would be nice :)

Regards,
Pierre



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to