Debian Security Update DSA-3883 rt-authen-externalauth - security update

[LinuxBot]

It was discovered that RT::Authen::ExternalAuth, an external authentication module for Request Tracker, is vulnerable to timing side-channel attacks for user passwords. Only ExternalAuth in DBI (database) mode is vulnerable.

Continue reading...