Re: [SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution

2006-01-27 Thread Nick Boyce
On Mon, 23 Jan 2006 15:06:55 +0100 (CET), DSA 952-1 wrote: > --- > Debian Security Advisory DSA 952-1 [EMAIL PROTECTED] > http://www.debian.org/security/ Moritz Muehlenhoff > January

Re: [SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution

2006-01-28 Thread Florian Weimer
* Nick Boyce: >>From this I infer that mod_auth_ldap for Debian-packaged Apache 2 must > be included with the main Debian Apache packages, and that no > libapache(2)-auth-ldap package is required - and that I therefore need > fixed Apache 2 packages. Is this so ? Apache 2 comes with its own LDAP

Re: [SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution

2006-01-29 Thread Nick Boyce
On Sat, 28 Jan 2006 13:56:50 +0100, Florian Weimer wrote: > * Nick Boyce: > > >>From this I infer that mod_auth_ldap for Debian-packaged Apache 2 must > > be included with the main Debian Apache packages, and that no > > libapache(2)-auth-ldap package is required - and that I therefore need > > f