[Authentication] realmd 0.16.0

Stef Walter stefw at redhat.com
Tue Apr 14 03:10:55 PDT 2015


In addition to some fixes, this release patches a couple vulnerabilities.

 * Disable automatic AD joins unless explicitly configured to
   do so. This guarantees that mutual trust is established with
   a domain that you are joining.

 * Validate textual data discovered via LDAP before using them
   in configuration files like samba.conf and sssd.conf

Thanks to Sebastian Krahmer for discovering these issues.

Please update to realmd 0.16.0.

Stef

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freedesktop.org/archives/authentication/attachments/20150414/445d4e17/attachment.sig>


More information about the Authentication mailing list