-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
https://fedorahosted.org/sssd/ticket/458
Previously, it was possible to perform a sort of LDAP filter injection
with careful crafting of the ldap attributes in the config file.
This guarantees that any attribute specified in the config file is
escaped properly, resulting in an inability to inject subfilters.
Note: this was not a security issue, as it was editable only by root and
even then, all checks were performed on the server, not the client.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkzdWXMACgkQeiVVYja6o6OivgCfUyMajTHDR15Vx2XhLcfwXUvr
sVsAniWHFXwyNjhu1Zm/WMXasA7zkg5M
=hlmE
-----END PGP SIGNATURE-----